Vendor
Ivanti vulnerabilities under active attack
36 Ivanti vulnerabilities have confirmed evidence of exploitation in the wild, and 12 are used in ransomware campaigns.
36
confirmed exploited
12
used in ransomware
36
past fix deadline
- CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability Ivanti · Connect Secure
- CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability Ivanti · Sentry
- CVE-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
- CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti · Connect Secure, Policy Secure, and ZTA Gateways
- CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability Ivanti · Endpoint Manager (EPM)
- CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Ivanti · Virtual Traffic Manager
- CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti · Cloud Services Appliance (CSA)
- CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti · Cloud Services Appliance
- CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)
- CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Ivanti · Connect Secure, Policy Secure, and Neurons
- CVE-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core
- CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Ivanti · Connect Secure and Policy Secure
- CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability Ivanti · Connect Secure and Policy Secure
- CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability Ivanti · Sentry
- CVE-2023-35081 Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2020-15505 Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability Ivanti · MobileIron Multiple Products
- CVE-2021-22893 Ivanti Pulse Connect Secure Use-After-Free Vulnerability Ivanti · Pulse Connect Secure
- CVE-2020-8243 Ivanti Pulse Connect Secure Code Execution Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-22900 Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-22894 Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability Ivanti · Pulse Connect Secure
- CVE-2020-8260 Ivanti Pulse Connect Secure Code Execution Vulnerability Ivanti · Pulse Connect Secure
- CVE-2021-22899 Ivanti Pulse Connect Secure Command Injection Vulnerability Ivanti · Pulse Connect Secure
- CVE-2019-11510 Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Ivanti · Pulse Connect Secure
- CVE-2019-11539 Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Ivanti · Pulse Connect Secure and Pulse Policy Secure