Ivanti vulnerabilities

Newest addition to KEV first.

• CVE-2026-118527

  Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with…

  Ivanti · Connect Secure

  ExploitedMedium4.3
• CVE-2026-111357

  Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root,…

  Ivanti · Connect Secure

  ExploitedHigh7.0
• CVE-2026-104935

  Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact…

  Ivanti · Connect Secure

  ExploitedHigh8.6
• CVE-2026-10520

  An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve…

  ivanti · Sentry

  ExploitedCritical10.0
• CVE-2026-6973

  An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to…

  Ivanti · Endpoint Manager Mobile

  ExploitedHigh7.2
• CVE-2026-1340

  A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

  Ivanti · Endpoint Manager Mobile

  ExploitedCritical9.8
• CVE-2026-1603

  An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

  Ivanti · Endpoint Manager

  ExploitedHigh8.6
• CVE-2026-1281

  A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

  Ivanti · Endpoint Manager Mobile

  ExploitedCritical9.8
• CVE-2025-4428

  Remote Code Execution

  Ivanti · Endpoint Manager Mobile

  ExploitedHigh7.2
• CVE-2025-4427

  Authentication Bypass

  Ivanti · Endpoint Manager Mobile

  ExploitedMedium5.3