Ivanti
Number 45 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: Ivanti, ivanti
Total vulnerabilities
418
Critical
98
High
221
Known Exploited
31
Exploit available
6
Network, no login needed
35.5%
Of 411 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 61 | 15 | 27 | 19 | 0 | 0 |
| 2025 | 105 | 14 | 52 | 39 | 0 | 0 |
| 2024 | 176 | 41 | 111 | 24 | 0 | 0 |
| 2023 | 71 | 26 | 30 | 8 | 0 | 7 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2021 | 2 | 0 | 0 | 2 | 0 | 0 |
| 2020 | 1 | 1 | 0 | 0 | 0 | 0 |
| 2019 | 2 | 1 | 1 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Avalanche | 92 | 78 |
| Endpoint Manager | 72 | 49 |
| Connect Secure | 65 | 43 |
| EPM | 33 | 33 |
| Endpoint Manager Mobile | 24 | 17 |
| Secure Access Client | 15 | 12 |
| EPMM | 11 | 5 |
| Sentry | 10 | 6 |
| Workspace Control | 10 | 10 |
| Xtraction | 8 | 5 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| SQL Injection | 64 | 49 |
| Memory Corruption | 40 | 31 |
| Path Traversal | 35 | 29 |
| Command Injection | 21 | 20 |
| Authentication Issues | 18 | 15 |
| Insecure Deserialization | 14 | 14 |
| Incorrect Permission Assignment for Critical Resource | 11 | 9 |
| Missing Authorization | 11 | 8 |
| Incorrect Permissions | 10 | 10 |
| Unrestricted File Upload | 10 | 9 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-118527 | Ivanti Connect Secure vulnerability | Medium | 0.8% | |
| CVE-2026-111357 | Ivanti Connect Secure vulnerability | High | 0.5% | |
| CVE-2026-104935 | Ivanti Connect Secure vulnerability | High | 88.9% | |
| CVE-2026-10520 | ivanti Sentry: Command Injection | Critical | 99.9% | |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile: Improper Input Validation | High | 34.5% | |
| CVE-2026-1603 | Ivanti Endpoint Manager: Authentication Issues | High | 88.3% | |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile: Code Injection | Critical | 98.6% | |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile: Code Injection | Critical | 98.7% | |
| CVE-2025-4428 | Remote Code Execution | High | 88.0% | |
| CVE-2025-4427 | Authentication Bypass | Medium | 99.9% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-83528 | Ivanti Endpoint Manager Mobile vulnerability | Medium | n/a | |
| CVE-2026-18128 | ivanti Endpoint Manager vulnerability | Medium | n/a | |
| CVE-2026-123181 | Ivanti Sentry: Path Traversal | Medium | n/a | |
| CVE-2026-123179 | Ivanti Sentry vulnerability | Medium | n/a | |
| CVE-2026-121683 | Ivanti Cloud Services Application: Authentication Issues | Critical | n/a | |
| CVE-2026-121653 | ivanti Endpoint Manager: SQL Injection | Critical | n/a | |
| CVE-2026-107405 | Ivanti Endpoint Manager Mobile vulnerability | Medium | n/a | |
| CVE-2026-107404 | Ivanti Endpoint Manager Mobile vulnerability | Medium | n/a | |
| CVE-2026-105813 | Ivanti User Workspace Manager vulnerability | Medium | n/a | |
| CVE-2026-105669 | Ivanti Sentry vulnerability | Medium | n/a |