KEVWire

Security intelligence, with context.

CISA KEV by vendor

Ivanti known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 36 Ivanti vulnerabilities: 6 added in the last 365 days, 19 rated critical (CVSS 9 or higher), and 12 with known ransomware use. The most recent was added Oct 13, 2026.

RSS feed for Ivanti exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEVCVEVulnerabilityCVSSEPSSFederal due dateRansomware use
2026-10-13CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability8.6 (v3.1)86.8%2026-10-16Unknown
2026-06-11CVE-2026-10520Ivanti Sentry OS Command Injection Vulnerability10 (v3.1)>99.9%2026-06-14Unknown
2026-05-07CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability7.2 (v3.1)34.5%2026-05-10Unknown
2026-04-08CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability9.8 (v3.1)98.6%2026-04-11Unknown
2026-03-09CVE-2026-1603Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability8.6 (v3.1)88.3%2026-03-23Unknown
2026-01-29CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability9.8 (v3.1)98.7%2026-02-01Unknown
2025-05-19CVE-2025-4427Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability5.3 (v3.1)>99.9%2025-06-09Unknown
2025-05-19CVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability7.2 (v3.1)88.0%2025-06-09Unknown
2025-04-04CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability9 (v3.1)>99.9%2025-04-11Known
2025-03-10CVE-2024-13159Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability9.8 (v3.1)>99.9%2025-03-31Unknown
2025-03-10CVE-2024-13160Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability9.8 (v3.1)91.0%2025-03-31Unknown
2025-03-10CVE-2024-13161Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability9.8 (v3.1)89.8%2025-03-31Unknown
2025-01-08CVE-2025-0282Ivanti Connect Secure unauthenticated buffer overflow9 (v3.1)>99.9%2025-01-15Known
2024-10-09CVE-2024-9379Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability6.5 (v3.1)44.3%2024-10-30Unknown
2024-10-09CVE-2024-9380Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability7.2 (v3.1)58.3%2024-10-30Unknown
2024-10-02CVE-2024-29824Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability9.6 (v3.0)>99.9%2024-10-23Unknown
2024-09-24CVE-2024-7593Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability9.8 (v3.1)>99.9%2024-10-15Unknown
2024-09-19CVE-2024-8963Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability9.4 (v3.1)98.6%2024-10-10Unknown
2024-09-13CVE-2024-8190Ivanti Cloud Services Appliance OS Command Injection Vulnerability7.2 (v3.1)88.5%2024-10-04Unknown
2024-03-25CVE-2021-44529Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability9.8 (v3.1)99.1%2024-04-15Known
2024-01-31CVE-2024-21893Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability8.2 (v3.0)>99.9%2024-02-02Known
2024-01-18CVE-2023-35082Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability10 (v3.0)>99.9%2024-02-08Known
2024-01-10CVE-2023-46805Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability8.2 (v3.0)>99.9%2024-01-22Known
2024-01-10CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection Vulnerability9.1 (v3.0)>99.9%2024-01-22Known
2023-08-22CVE-2023-38035Ivanti Sentry Authentication Bypass Vulnerability9.8 (v3.1)>99.9%2023-09-12Known
2023-07-31CVE-2023-35081Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability7.2 (v3.0)63.6%2023-08-21Unknown
2023-07-25CVE-2023-35078Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability10 (v3.0)>99.9%2023-08-15Known
2021-11-03CVE-2019-11510Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability9.9 (v3.0)>99.9%2022-05-03Known
2021-11-03CVE-2019-11539Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability8 (v3.0)98.5%2022-05-03Known
2021-11-03CVE-2020-15505Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability9.8 (v3.1)99.7%2022-05-03Unknown
2021-11-03CVE-2020-8243Ivanti Pulse Connect Secure Code Execution Vulnerability7.2 (v3.1)90.8%2022-05-03Unknown
2021-11-03CVE-2020-8260Ivanti Pulse Connect Secure Code Execution Vulnerability7.2 (v3.1)96.5%2022-05-03Unknown
2021-11-03CVE-2021-22893Ivanti Pulse Connect Secure Use-After-Free Vulnerability10 (v3.1)47.2%2022-05-03Known
2021-11-03CVE-2021-22894Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability8.8 (v3.1)41.3%2022-05-03Unknown
2021-11-03CVE-2021-22899Ivanti Pulse Connect Secure Command Injection Vulnerability8.8 (v3.1)22.9%2022-05-03Unknown
2021-11-03CVE-2021-22900Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability7.2 (v3.1)14.1%2022-05-03Unknown