Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Endpoint management and application control · in CISA KEV

Ivanti in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 38 entries for Ivanti as of catalog version 2026.11.06, released November 6, 2026. The newest was added October 30, 2026, and the latest federal due date is November 13, 2026. CISA marks 12 of them as known ransomware use.

Updated

entries in the catalog
38
newest addition
October 30, 2026
latest federal due date
November 13, 2026
marked known ransomware use
12

Directory record

Website
www.ivanti.com
Categories
Endpoint management and application control (primary), Zero trust network access
Headquarters
HQ not established
Founded
Not established
Ownership
Ownership not established
Company record
Ivanti on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “Ivanti”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added October 30, 2026

    CVE-2026-118527 Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

    Connect Secure · on must-patch

    Due November 13, 2026

  2. Added October 30, 2026

    CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability

    Connect Secure · on must-patch

    Due November 2, 2026

  3. Added October 13, 2026

    CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

    Connect Secure · on must-patch

    Due October 16, 2026

  4. Added June 11, 2026

    CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability

    Sentry

    Due June 14, 2026

  5. Added May 7, 2026

    CVE-2026-6973 Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

    Endpoint Manager Mobile (EPMM)

    Due May 10, 2026

  6. Added April 8, 2026

    CVE-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

    Endpoint Manager Mobile (EPMM)

    Due April 11, 2026

  7. Added March 9, 2026

    CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

    Endpoint Manager (EPM)

    Due March 23, 2026

  8. Added January 29, 2026

    CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

    Endpoint Manager Mobile (EPMM)

    Due February 1, 2026

  9. Added May 19, 2025

    CVE-2025-4428 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

    Endpoint Manager Mobile (EPMM)

    Due June 9, 2025

  10. Added May 19, 2025

    CVE-2025-4427 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

    Endpoint Manager Mobile (EPMM)

    Due June 9, 2025

  11. Added April 4, 2025

    CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

    Connect Secure, Policy Secure, and ZTA Gateways · known ransomware use

    Due April 11, 2025

  12. Added March 10, 2025

    CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

    Endpoint Manager (EPM)

    Due March 31, 2025

  13. Added March 10, 2025

    CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

    Endpoint Manager (EPM)

    Due March 31, 2025

  14. Added March 10, 2025

    CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

    Endpoint Manager (EPM)

    Due March 31, 2025

  15. Added January 8, 2025

    CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

    Connect Secure, Policy Secure, and ZTA Gateways · known ransomware use

    Due January 15, 2025

  16. Added October 9, 2024

    CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

    Cloud Services Appliance (CSA)

    Due October 30, 2024

  17. Added October 9, 2024

    CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

    Cloud Services Appliance (CSA)

    Due October 30, 2024

  18. Added October 2, 2024

    CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

    Endpoint Manager (EPM)

    Due October 23, 2024

  19. Added September 24, 2024

    CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

    Virtual Traffic Manager

    Due October 15, 2024

  20. Added September 19, 2024

    CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

    Cloud Services Appliance (CSA)

    Due October 10, 2024

  21. Added September 13, 2024

    CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability

    Cloud Services Appliance

    Due October 4, 2024

  22. Added March 25, 2024

    CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

    Endpoint Manager Cloud Service Appliance (EPM CSA) · known ransomware use

    Due April 15, 2024

  23. Added January 31, 2024

    CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

    Connect Secure, Policy Secure, and Neurons · known ransomware use

    Due February 2, 2024

  24. Added January 18, 2024

    CVE-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

    Endpoint Manager Mobile (EPMM) and MobileIron Core · known ransomware use

    Due February 8, 2024

  25. Added January 10, 2024

    CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

    Connect Secure and Policy Secure · known ransomware use

    Due January 22, 2024

  26. Added January 10, 2024

    CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

    Connect Secure and Policy Secure · known ransomware use

    Due January 22, 2024

  27. Added August 22, 2023

    CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability

    Sentry · known ransomware use

    Due September 12, 2023

  28. Added July 31, 2023

    CVE-2023-35081 Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

    Endpoint Manager Mobile (EPMM)

    Due August 21, 2023

  29. Added July 25, 2023

    CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

    Endpoint Manager Mobile (EPMM) · known ransomware use

    Due August 15, 2023

  30. Added November 3, 2021

    CVE-2021-22900 Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

    Pulse Connect Secure

    Due May 3, 2022

  31. Added November 3, 2021

    CVE-2021-22899 Ivanti Pulse Connect Secure Command Injection Vulnerability

    Pulse Connect Secure

    Due May 3, 2022

  32. Added November 3, 2021

    CVE-2021-22894 Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

    Pulse Connect Secure

    Due May 3, 2022

  33. Added November 3, 2021

    CVE-2021-22893 Ivanti Pulse Connect Secure Use-After-Free Vulnerability

    Pulse Connect Secure · known ransomware use

    Due May 3, 2022

  34. Added November 3, 2021

    CVE-2020-8260 Ivanti Pulse Connect Secure Code Execution Vulnerability

    Pulse Connect Secure

    Due May 3, 2022

  35. Added November 3, 2021

    CVE-2020-8243 Ivanti Pulse Connect Secure Code Execution Vulnerability

    Pulse Connect Secure

    Due May 3, 2022

  36. Added November 3, 2021

    CVE-2020-15505 Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability

    MobileIron Multiple Products

    Due May 3, 2022

  37. Added November 3, 2021

    CVE-2019-11539 Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

    Pulse Connect Secure and Pulse Policy Secure · known ransomware use

    Due May 3, 2022

  38. Added November 3, 2021

    CVE-2019-11510 Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

    Pulse Connect Secure · known ransomware use

    Due May 3, 2022

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Daily briefing · November 5, 2026

    CISA Orders Federal Patch for Exploited Ivanti Connect Secure Flaws

  2. Daily briefing · November 4, 2026

    CISA Orders Agencies to Patch Exploited Ivanti Connect Secure Flaws

  3. Daily briefing · November 3, 2026

    CISA sets patch deadlines for exploited Ivanti Connect Secure flaws

  4. Daily briefing · November 2, 2026

    CISA Adds Two Actively Exploited Ivanti Connect Secure Flaws to KEV

  5. Daily briefing · November 1, 2026

    CISA Adds Two Actively Exploited Ivanti Connect Secure Flaws to KEV Catalog

  6. Daily briefing · October 31, 2026

    CISA adds actively exploited Ivanti Connect Secure flaws to KEV catalog

  7. Weekly archive · Oct 26 – Nov 1, 2026

    CISA Adds Two Actively Exploited Ivanti Connect Secure Flaws to KEV

  8. Daily briefing · October 20, 2026

    CISA deadline hits for exploited Palo Alto, Cisco and Ahsay flaws; Ivanti chain also active

  9. Daily briefing · October 17, 2026

    Attackers Chain Three Ivanti Zero-Days to Gain Root on Patched VPNs

  10. Daily briefing · October 16, 2026

    Attackers Exploit Ivanti Connect Secure Zero-Day, CISA Orders Immediate Patching

  11. Daily briefing · October 15, 2026

    CISA urges emergency patching of exploited Ivanti Connect Secure zero-day

  12. Daily briefing · October 14, 2026

    CISA Warns of Actively Exploited Ivanti Connect Secure Zero-Day

  13. Weekly archive · Oct 12 – Oct 18, 2026

    Ivanti Connect Secure Exploitation Prompts KEV Addition

  14. Weekly archive · Jun 8 – Jun 14, 2026

    Ivanti Sentry Command Injection Bug Joins CISA's KEV List

  15. Weekly archive · Jan 26 – Feb 1, 2026

    CISA Flags Actively Exploited Ivanti EPMM Flaw

  16. Weekly archive · Sep 15 – Sep 21, 2025

    CISA Details Malicious Listener Malware Targeting Ivanti EPMM

  17. Weekly archive · May 19 – May 25, 2025

    CISA Adds Six Vulnerabilities to Known Exploited Catalog

  18. Weekly archive · Mar 31 – Apr 6, 2025

    Ivanti Patches Actively Exploited Connect Secure Flaw

  19. Weekly archive · Mar 24 – Mar 30, 2025

    CISA analyzes RESURGE malware on Ivanti Connect Secure appliances

  20. Weekly archive · Jan 20 – Jan 26, 2025

    CISA and FBI Detail Ivanti Cloud Service Exploitation Chain

  21. Weekly archive · Jan 13 – Jan 19, 2025

    Nominet becomes the first named victim of an Ivanti Connect Secure zero-day

  22. Weekly archive · Jan 6 – Jan 12, 2025

    Ivanti Connect Secure Zero-Day Added to CISA's KEV Catalog

  23. Weekly archive · Jan 6 – Jan 12, 2025

    Mandiant Traces Ivanti VPN Zero-Day Exploitation to Mid-December

  24. Weekly archive · Oct 7 – Oct 13, 2024

    Fortinet and Ivanti appliance flaws added to the KEV catalog

  25. Weekly archive · Sep 30 – Oct 6, 2024

    Ivanti Endpoint Manager SQL Injection Bug Joins CISA Exploited Vulnerabilities List

  26. Weekly archive · Sep 23 – Sep 29, 2024

    CISA Adds Ivanti vTM Bypass Flaw to KEV Catalog

  27. Weekly archive · Sep 16 – Sep 22, 2024

    Ivanti Patches Exploited Cloud Services Appliance Bypass

  28. Weekly archive · Sep 9 – Sep 15, 2024

    Ivanti confirms limited exploitation of Cloud Services Appliance flaw

  29. Weekly archive · Sep 9 – Sep 15, 2024

    Ivanti patches maximum-severity Endpoint Manager vulnerability

  30. Weekly archive · Aug 12 – Aug 18, 2024

    Ivanti Patches Avalanche, Neurons for ITSM, and Virtual Traffic Manager

  31. Weekly archive · Apr 15 – Apr 21, 2024

    Ivanti Patches Critical Avalanche Vulnerabilities

  32. Weekly archive · Apr 1 – Apr 7, 2024

    Ivanti Patches Four Flaws in Connect Secure and Policy Secure Gateways

  33. Weekly archive · Mar 25 – Mar 31, 2024

    CISA adds Fortinet, Ivanti, and Nice Linear flaws to KEV catalog

  34. Weekly archive · Mar 18 – Mar 24, 2024

    CISA flags Ivanti fixes for Neurons for ITSM and Standalone Sentry

  35. Weekly archive · Feb 26 – Mar 3, 2024

    Five Eyes Warn of Active Exploitation Across Ivanti Connect Secure and Policy Secure

  36. Weekly archive · Jan 29 – Feb 4, 2024

    Ivanti discloses two more Connect Secure and Policy Secure flaws

  37. Weekly archive · Jan 15 – Jan 21, 2024

    CISA Issues Emergency Directive on Ivanti Connect Secure and Policy Secure Flaws

  38. Weekly archive · Jan 15 – Jan 21, 2024

    Ivanti Mobile Management Flaw Added to CISA's Known Exploited Vulnerabilities List

  39. Weekly archive · Jan 8 – Jan 14, 2024

    Ivanti Connect Secure and Policy Secure zero-days exploited, added to KEV Catalog

  40. Weekly archive · Aug 21 – Aug 27, 2023

    Ivanti Sentry and Veeam bugs added to KEV Catalog

  41. Weekly archive · Aug 21 – Aug 27, 2023

    Ivanti Sentry zero-day flaw draws urgent patch guidance

  42. Weekly archive · Jul 31 – Aug 6, 2023

    CISA Adds Ivanti EPMM Path Traversal Flaw to KEV Catalog

  43. Weekly archive · Jul 31 – Aug 6, 2023

    CISA and Norway's NCSC Detail APT Exploitation of Ivanti EPMM

  44. Weekly archive · Jul 24 – Jul 30, 2023

    Ivanti EPMM zero-day used against 12 Norwegian ministries

  45. Weekly archive · Jan 10 – Jan 16, 2022

    Ivanti Updates Log4j Advisory for Multiple Products

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for Ivanti, published November 8, 2026