Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how ivanti compares to other vendors in security performance

View Risk Score →

Software

ivanti avalanche
302
ivanti endpoint manager (epm)
186
ivanti pulse connect secure
116
ivanti connect secure
93
ivanti endpoint manager
55
ivanti endpoint manager mobile (epmm)
41
ivanti secure access client
24
ivanti workspace control
24
ivanti endpoint manager mobile
21
ivanti policy secure
17
ivanti sentry
14
ivanti epm
10
ivanti neurons for itsm
10
ivanti cloud service appliances
8
ivanti epmm
8
ivanti zero trust access gateway
6
ivanti endpoint manager cloud services appliance
5
ivanti neurons for secure access
4
ivanti neurons for zero-trust access
4
ivanti zta gateway
4
ivanti cloud services appliance (csa)
3
ivanti desktop and server management
3
ivanti incapptic connect
3
ivanti mobileiron
3
ivanti neurons for zta gateways
3
ivanti xtraction
3
ivanti zta gateways
3
ivanti application control
2
ivanti automation
2
ivanti cloud services appliance
2
ivanti cloud services application
2
ivanti connect secure and policy secure
2
ivanti connect secure, policy secure, and zta gateways
2
ivanti desktop & server management
2
ivanti dsm
2
ivanti ivanti endpoint manager
2
ivanti ivanti sentry
2
ivanti n-itsm
2
ivanti security controls
2
ivanti standalone sentry
2
ivanti virtual traffic manager
2
ivanti
1
ivanti endpoint manager (epm)
1
ivanti application control engine
1
ivanti avalanche manager
1
ivanti cloud security agent
1
ivanti connect secure (ics)
1
ivanti connect secure, policy secure, and neurons
1
ivanti csa
1
ivanti desktop \& server management
1

Ivanti Secure AccessInput validation error in Secure Access clients prior to 14.55

Risk 20
Severity
2.3
First published (updated )
CVE-2026-40958

Ivanti XtractionPath Traversal

Risk 44
Severity
7.7
First published (updated )
CVE-2026-14903

Ivanti XtractionAn open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacke…

Risk 22
Severity
4
First published (updated )
CVE-2026-14902

5 enterprise CVEs from last week worth checking out this week (Jun 7–13)

First published (updated )
Social
reddit

BleepingComputerCISA orders feds to patch actively exploited Ivanti flaw by Sunday

Exploited
Zeroday
First published (updated )
News
BleepingComputer
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dark ReadingMax-Severity Ivanti Flaw Exploited 24 Hours After Disclosure

Exploited
First published (updated )
News
Dark Reading

BleepingComputerCISA tells govt agencies to patch critical exploited flaws in 3 days

Exploited
Zeroday
First published (updated )
News
BleepingComputer

BleepingComputerMax severity Ivanti Sentry vulnerability now exploited in attacks

Exploited
Zeroday
First published (updated )
News
BleepingComputer

BleepingComputerIvanti: Max severity Sentry flaw allows code execution as root

First published (updated )
News
BleepingComputer

More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520) - watchTowr Labs

First published (updated )
Social
reddit
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520) - watchTowr Labs

First published (updated )
Social
reddit

Ivanti EPMMOS Command Injection, Command Injection

Risk 66
Severity
7.2
First published (updated )
CVE-2026-10727

Ivanti Standalone SentryAn Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R1…

Risk 88
Severity
9.9
First published (updated )
CVE-2026-10523

Ivanti Standalone SentryIvanti Sentry OS Command Injection Vulnerability

Risk 100
Severity
10
Exploited
Trending
3 Months
First published (updated )
CVE-2026-10520

Ivanti Ivanti Neurons for ITSMAn Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a…

Risk 57
Severity
8.8
EPSS
1.44%
First published (updated )
CVE-2026-9614
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ivanti Secure Access ClientAn improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows…

Risk 56
Severity
8.8
EPSS
0.56%
First published (updated )
CVE-2026-8992

Ivanti Endpoint ManagerSQL Injection

Risk 56
Severity
8.8
EPSS
0.35%
First published (updated )
CVE-2026-8111

Ivanti Endpoint ManagerIncorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 all…

Risk 51
Severity
7.8
EPSS
0.03%
First published (updated )
CVE-2026-8110

Ivanti Endpoint ManagerAn exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 al…

Risk 27
Severity
6.5
EPSS
0.12%
First published (updated )
CVE-2026-8109

Ivanti Virtual Traffic ManagerOS Command Injection, Command Injection

Risk 50
Severity
7.2
EPSS
1.46%
First published (updated )
CVE-2026-8051
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ivanti Secure Access ClientRace Condition

Risk 51
Severity
7.8
EPSS
0.03%
First published (updated )
CVE-2026-7432

Ivanti Secure Access ClientAn incorrect permission assignment for critical resource of Ivanti Secure Access Client   before 22.…

Risk 21
Severity
4.4
EPSS
0.04%
First published (updated )
CVE-2026-7431

Ivanti XtractionExternal control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authentica…

Risk 49
Severity
9.6
EPSS
0.12%
First published (updated )
CVE-2026-8043

Ivanti Endpoint ManagerIvanti Endpoint Manager RemoteControlAuth Exposed Dangerous Method Information Disclosure Vulnerability

Risk 43
First published (updated )
Advisory
ZDI-26-308

Ivanti Endpoint ManagerZDI-26-308: Ivanti Endpoint Manager RemoteControlAuth Exposed Dangerous Method Information Disclosure Vulnerability

Risk 48
First published (updated )
ZDI-CAN-28617
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

BleepingComputerCISA gives feds four days to patch Ivanti flaw exploited as zero-day

Exploited
Zeroday
First published (updated )
News
BleepingComputer

BleepingComputerCISA gives feds four days to patch Ivanti flaw exploited as zero-day

Exploited
Zeroday
First published (updated )
News
BleepingComputer

Ivanti Endpoint Manager MobileAn Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 a…

Risk 69
Severity
9.1
First published (updated )
CVE-2026-5787

Ivanti Endpoint Manager MobileAn Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a …

Risk 89
Severity
9.8
First published (updated )
CVE-2026-5788

Ivanti Endpoint Manager MobileImproper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allo…

Risk 48
Severity
9.1
EPSS
0.06%
First published (updated )
CVE-2026-7821
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203