Cyberfeed6 › Vendors › Ivanti
CISA lists 38 Ivanti vulnerabilities as exploited in real attacks, and 12 of them are known to be used in ransomware campaigns. Most entries concern Endpoint Manager Mobile (EPMM), Pulse Connect Secure, Endpoint Manager (EPM), Connect Secure.
Showing the 38 most recently added of 38. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | Connect Secure | 2026-10-30 | Not rated | No | Vendor notice |
| CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability | Connect Secure | 2026-10-30 | High (7.0) | No | Vendor notice |
| CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | Connect Secure | 2026-10-13 | High (8.6) | No | |
| CVE-2026-10520Ivanti Sentry OS Command Injection Vulnerability | Sentry | 2026-06-11 | Critical (10.0) | No | Vendor notice |
| CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | Endpoint Manager Mobile (EPMM) | 2026-05-07 | High (7.2) | No | Vendor notice |
| CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Endpoint Manager Mobile (EPMM) | 2026-04-08 | Critical (9.8) | No | Vendor notice |
| CVE-2026-1603Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | Endpoint Manager (EPM) | 2026-03-09 | High (8.6) | No | Vendor notice |
| CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Endpoint Manager Mobile (EPMM) | 2026-01-29 | Critical (9.8) | No | Vendor notice |
| CVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Endpoint Manager Mobile (EPMM) | 2025-05-19 | High (7.2) | No | Vendor notice |
| CVE-2025-4427Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | Endpoint Manager Mobile (EPMM) | 2025-05-19 | Medium (5.3) | No | Vendor notice |
| CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Connect Secure, Policy Secure, and ZTA Gateways | 2025-04-04 | Critical (9.0) | Yes | Vendor notice |
| CVE-2024-13161Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Endpoint Manager (EPM) | 2025-03-10 | Critical (9.8) | No | Vendor notice |
| CVE-2024-13160Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Endpoint Manager (EPM) | 2025-03-10 | Critical (9.8) | No | Vendor notice |
| CVE-2024-13159Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Endpoint Manager (EPM) | 2025-03-10 | Critical (9.8) | No | Vendor notice |
| CVE-2025-0282Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Connect Secure, Policy Secure, and ZTA Gateways | 2025-01-08 | Critical (9.0) | Yes | Vendor notice |
| CVE-2024-9380Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | Cloud Services Appliance (CSA) | 2024-10-09 | High (7.2) | No | Vendor notice |
| CVE-2024-9379Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | Cloud Services Appliance (CSA) | 2024-10-09 | Medium (6.5) | No | Vendor notice |
| CVE-2024-29824Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | Endpoint Manager (EPM) | 2024-10-02 | Critical (9.6) | No | Vendor notice |
| CVE-2024-7593Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | Virtual Traffic Manager | 2024-09-24 | Critical (9.8) | No | Vendor notice |
| CVE-2024-8963Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | Cloud Services Appliance (CSA) | 2024-09-19 | Critical (9.4) | No | Vendor notice |
| CVE-2024-8190Ivanti Cloud Services Appliance OS Command Injection Vulnerability | Cloud Services Appliance | 2024-09-13 | High (7.2) | No | Vendor notice |
| CVE-2021-44529Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | Endpoint Manager Cloud Service Appliance (EPM CSA) | 2024-03-25 | Critical (9.8) | Yes | Vendor notice |
| CVE-2024-21893Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | Connect Secure, Policy Secure, and Neurons | 2024-01-31 | High (8.2) | Yes | Vendor notice |
| CVE-2023-35082Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | Endpoint Manager Mobile (EPMM) and MobileIron Core | 2024-01-18 | Critical (10.0) | Yes | Vendor notice |
| CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | Connect Secure and Policy Secure | 2024-01-10 | Critical (9.1) | Yes | Vendor notice |
| CVE-2023-46805Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | Connect Secure and Policy Secure | 2024-01-10 | High (8.2) | Yes | Vendor notice |
| CVE-2023-38035Ivanti Sentry Authentication Bypass Vulnerability | Sentry | 2023-08-22 | Critical (9.8) | Yes | Vendor notice |
| CVE-2023-35081Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | Endpoint Manager Mobile (EPMM) | 2023-07-31 | High (7.2) | No | Vendor notice |
| CVE-2023-35078Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | Endpoint Manager Mobile (EPMM) | 2023-07-25 | Critical (10.0) | Yes | Vendor notice |
| CVE-2021-22900Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | Pulse Connect Secure | 2021-11-03 | High (7.2) | No | |
| CVE-2021-22899Ivanti Pulse Connect Secure Command Injection Vulnerability | Pulse Connect Secure | 2021-11-03 | High (8.8) | No | |
| CVE-2021-22894Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | Pulse Connect Secure | 2021-11-03 | High (8.8) | No | |
| CVE-2021-22893Ivanti Pulse Connect Secure Use-After-Free Vulnerability | Pulse Connect Secure | 2021-11-03 | Critical (10.0) | Yes | |
| CVE-2020-8260Ivanti Pulse Connect Secure Code Execution Vulnerability | Pulse Connect Secure | 2021-11-03 | High (7.2) | No | |
| CVE-2020-8243Ivanti Pulse Connect Secure Code Execution Vulnerability | Pulse Connect Secure | 2021-11-03 | High (7.2) | No | |
| CVE-2020-15505Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | MobileIron Multiple Products | 2021-11-03 | Critical (9.8) | No | |
| CVE-2019-11539Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | Pulse Connect Secure and Pulse Policy Secure | 2021-11-03 | High (8.0) | Yes | |
| CVE-2019-11510Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | Pulse Connect Secure | 2021-11-03 | Critical (9.9) | Yes |
Attackers chain Ivanti Connect Secure flaws to take over fully patched VPN appliances
IT October 30, 2026
Palo Alto Networks patches an exploited PAN-OS zero-day
IT October 14, 2026
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.