Is Ivanti safe right now?
3 flaws were added to CISA's list of actively exploited vulnerabilities in the last 30 days, including zero-days. If you run Ivanti, update now.
Exploited in the last 90 days
- Connect SecureZero-dayIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
- Connect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerability
What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
- Connect SecureZero-dayAn Ivanti VPN flaw lets attackers in without a password
What to do: Upgrade Connect Secure to the fixed version.
Fixed in: 25.1.3.0 or later
Earlier exploited flaws
- Ivanti Sentry OS Command Injection Vulnerability Zero-day
- Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Zero-day
- Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
- Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
- Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Zero-day
- Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Zero-day
- Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability Zero-day
- Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Zero-day
- Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
- Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
- Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
- Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Zero-day
- Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Zero-day
- Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Zero-day
- Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 8 | 5 |
| 2025 | 7 | 4 |
| 2024 | 11 | 7 |
| 2023 | 3 | 3 |
| 2022 | 1 | 0 |
Questions
Is Ivanti safe right now?
3 flaws were added to CISA's list of actively exploited vulnerabilities in the last 30 days, including zero-days. If you run Ivanti, update now. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many Ivanti vulnerabilities have been exploited?
39 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 12 of them used by ransomware.
Covers products matching ivanti, pulse secure, mobileiron. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.