Ivanti vulnerabilities

CVEs per yearBy the year they were published

1. 202316
2. 20233
3. 2024197
4. 202464
5. 202572
6. 202648

Known exploitedNewest addition to KEV first

• CVE-2026-118527

  Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with…

  Ivanti · Connect Secure

  ExploitedMedium4.3
• CVE-2026-111357

  Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root,…

  Ivanti · Connect Secure

  ExploitedHigh7.0
• CVE-2026-104935

  Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact…

  Ivanti · Connect Secure

  ExploitedHigh8.6
• CVE-2026-10520

  An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve…

  ivanti · Sentry

  ExploitedCritical10.0
• CVE-2026-6973

  An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to…

  Ivanti · Endpoint Manager Mobile

  ExploitedHigh7.2
• CVE-2026-1340

  A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

  Ivanti · Endpoint Manager Mobile

  ExploitedCritical9.8
• CVE-2026-1603

  An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

  Ivanti · Endpoint Manager

  ExploitedHigh8.6
• CVE-2026-1281

  A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

  Ivanti · Endpoint Manager Mobile

  ExploitedCritical9.8
• CVE-2025-4428

  Remote Code Execution

  Ivanti · Endpoint Manager Mobile

  ExploitedHigh7.2
• CVE-2025-4427

  Authentication Bypass

  Ivanti · Endpoint Manager Mobile

  ExploitedMedium5.3

Newest CVEs

• CVE-2026-118527

  Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with…

  Ivanti · Connect Secure

  ExploitedMedium4.3
• CVE-2026-111357

  Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root,…

  Ivanti · Connect Secure

  ExploitedHigh7.0
• CVE-2026-109412

  An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.

  Ivanti · Neurons Patch for Intune

  Critical9.9
• CVE-2026-106047

  A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read…

  Ivanti · Xtraction

  High7.7
• CVE-2026-106043

  A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create,…

  Ivanti · Xtraction

  High7.5
• CVE-2026-106042

  An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect…

  Ivanti · Xtraction

  Critical9.9
• CVE-2026-106035

  An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose…

  Ivanti · Xtraction

  Medium5.5
• CVE-2026-106034

  A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the…

  Ivanti · Xtraction

  Medium5.0
• CVE-2026-104935

  Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact…

  Ivanti · Connect Secure

  ExploitedHigh8.6
• CVE-2026-12647

  A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

  Ivanti · Ivanti Neurons for ITSM

  Critical9.9