All vendors
Ivanti KEV entries added per year — 2021: 9, 2023: 3, 2024: 11, 2025: 7, 2026: 6.
Ivanti — known exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalog (KEV) lists vulnerabilities that CISA has confirmed are being exploited in the wild; U.S. federal civilian agencies are required to remediate each entry by its due date. This page joins the KEV entries for Ivanti with NVD CVSS scores and CISA's ransomware-campaign flag. See our methodology or browse all CVEs.
36 KEV entries
12 ransomware-linked
16 products
avg CVSS 8.6
last added 2026-10-13
Key findings
CISA's Known Exploited Vulnerabilities catalog lists 36 Ivanti vulnerabilities confirmed as exploited in the wild across 16 products; 12 of them (33%) are flagged as used in known ransomware campaigns. Endpoint Manager Mobile (EPMM) and Pulse Connect Secure are tied as the most-affected products, with 7 entries each (19% of the total each). CISA added 6 entries in 2026 so far, compared with 7 in 2025. Across the 36 entries with an NVD CVSS score (100% of the total), the average score is 8.6; 18 entries are rated critical by NVD. The most recent addition is CVE-2026-104935 (Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability), added on 2026-10-13.
Affected products
| Product | Entries | Share |
|---|---|---|
| Endpoint Manager Mobile (EPMM) | 7 | 19% |
| Pulse Connect Secure | 7 | 19% |
| Endpoint Manager (EPM) | 4 | 11% |
| Cloud Services Appliance (CSA) | 3 | 8.3% |
| Sentry | 2 | 5.6% |
| Connect Secure, Policy Secure, and ZTA Gateways | 2 | 5.6% |
| Connect Secure and Policy Secure | 2 | 5.6% |
| Connect Secure | 1 | 2.8% |
| Endpoint Manager (EPM) | 1 | 2.8% |
| Virtual Traffic Manager | 1 | 2.8% |
| Cloud Services Appliance | 1 | 2.8% |
| Endpoint Manager Cloud Service Appliance (EPM CSA) | 1 | 2.8% |
| Connect Secure, Policy Secure, and Neurons | 1 | 2.8% |
| Endpoint Manager Mobile (EPMM) and MobileIron Core | 1 | 2.8% |
| MobileIron Multiple Products | 1 | 2.8% |
| Pulse Connect Secure and Pulse Policy Secure | 1 | 2.8% |
Entries added per year
By date added to the KEV catalog
Exploited Ivanti vulnerabilities (36)
Newest first. CVSS scores from NVD where available.
| CVE | Product | Vulnerability | Date added | Ransomware | CVSS |
|---|---|---|---|---|---|
| CVE-2026-104935 | Connect Secure | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 2026-10-13 | — | HIGH8.6 |
| CVE-2026-10520 | Sentry | Ivanti Sentry OS Command Injection Vulnerability | 2026-06-11 | — | CRITICAL10.0 |
| CVE-2026-6973 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | 2026-05-07 | — | HIGH7.2 |
| CVE-2026-1340 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2026-04-08 | — | CRITICAL9.8 |
| CVE-2026-1603 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 2026-03-09 | — | HIGH8.6 |
| CVE-2026-1281 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2026-01-29 | — | CRITICAL9.8 |
| CVE-2025-4428 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2025-05-19 | — | HIGH7.2 |
| CVE-2025-4427 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | 2025-05-19 | — | MEDIUM5.3 |
| CVE-2025-22457 | Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | 2025-04-04 | Known | CRITICAL9.0 |
| CVE-2024-13161 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 2025-03-10 | — | CRITICAL9.8 |
| CVE-2024-13160 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 2025-03-10 | — | CRITICAL9.8 |
| CVE-2024-13159 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 2025-03-10 | — | CRITICAL9.8 |
| CVE-2025-0282 | Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | 2025-01-08 | Known | CRITICAL9.0 |
| CVE-2024-9380 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | 2024-10-09 | — | HIGH7.2 |
| CVE-2024-9379 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 2024-10-09 | — | MEDIUM6.5 |
| CVE-2024-29824 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | 2024-10-02 | — | HIGH8.8 |
| CVE-2024-7593 | Virtual Traffic Manager | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 2024-09-24 | — | CRITICAL9.8 |
| CVE-2024-8963 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 2024-09-19 | — | CRITICAL9.4 |
| CVE-2024-8190 | Cloud Services Appliance | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | 2024-09-13 | — | HIGH7.2 |
| CVE-2021-44529 | Endpoint Manager Cloud Service Appliance (EPM CSA) | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | 2024-03-25 | Known | CRITICAL9.8 |
| CVE-2024-21893 | Connect Secure, Policy Secure, and Neurons | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | 2024-01-31 | Known | HIGH8.2 |
| CVE-2023-35082 | Endpoint Manager Mobile (EPMM) and MobileIron Core | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | 2024-01-18 | Known | CRITICAL9.8 |
| CVE-2023-46805 | Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | 2024-01-10 | Known | HIGH8.2 |
| CVE-2024-21887 | Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | 2024-01-10 | Known | CRITICAL9.1 |
| CVE-2023-38035 | Sentry | Ivanti Sentry Authentication Bypass Vulnerability | 2023-08-22 | Known | CRITICAL9.8 |
| CVE-2023-35081 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 2023-07-31 | — | HIGH7.2 |
| CVE-2023-35078 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 2023-07-25 | Known | CRITICAL9.8 |
| CVE-2020-15505 | MobileIron Multiple Products | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | 2021-11-03 | — | CRITICAL9.8 |
| CVE-2021-22893 | Pulse Connect Secure | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 2021-11-03 | Known | CRITICAL10.0 |
| CVE-2020-8243 | Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | 2021-11-03 | — | HIGH7.2 |
| CVE-2021-22900 | Pulse Connect Secure | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 2021-11-03 | — | HIGH7.2 |
| CVE-2021-22894 | Pulse Connect Secure | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | 2021-11-03 | — | HIGH8.8 |
| CVE-2020-8260 | Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | 2021-11-03 | — | HIGH7.2 |
| CVE-2021-22899 | Pulse Connect Secure | Ivanti Pulse Connect Secure Command Injection Vulnerability | 2021-11-03 | — | HIGH8.8 |
| CVE-2019-11510 | Pulse Connect Secure | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | 2021-11-03 | Known | CRITICAL10.0 |
| CVE-2019-11539 | Pulse Connect Secure and Pulse Policy Secure | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | 2021-11-03 | Known | HIGH7.2 |
Source: CISA Known Exploited Vulnerabilities catalog, joined with NIST NVD CVSS data. Vendor names are normalized across spellings. Compare all vendors.