Is itCheck something

Attack list

Ivanti

38 attacked bugs

Yes. Attackers are using Ivanti bugs right now.

What to do

Ask whoever runs it (your web host or IT team) to install the vendor's latest security update now.

Attackers keep using these against anything that hasn't updated. Updating closes them.

BugConfirmed in attacks

  1. Ivanti Connect Secure flaw lets a logged-in user plant filesCVE-2026-118527Oct 30, 2026
  2. Ivanti Connect Secure flaw lets a local user gain more powerCVE-2026-111357Oct 30, 2026
  3. Attackers can run commands on Ivanti Connect Secure before loginCVE-2026-104935Oct 13, 2026
  4. Ivanti Sentry bug: OS command injectionCVE-2026-10520Jun 11, 2026
  5. Ivanti Endpoint Manager Mobile (EPMM) bug: (epmm) improper input validationCVE-2026-6973May 7, 2026
  6. Ivanti Endpoint Manager Mobile (EPMM) bug: (epmm) code injectionCVE-2026-1340Apr 8, 2026
  7. Ivanti Endpoint Manager (EPM) bug: (epm) authentication bypassCVE-2026-1603Mar 9, 2026
  8. Ivanti Endpoint Manager Mobile (EPMM) bug: (epmm) code injectionCVE-2026-1281Jan 29, 2026
  9. Ivanti Endpoint Manager Mobile (EPMM) bug: (epmm) code injectionCVE-2025-4428May 19, 2025
  10. Ivanti Endpoint Manager Mobile (EPMM) bug: (epmm) authentication bypassCVE-2025-4427May 19, 2025
  11. Ivanti Connect Secure, Policy Secure, and ZTA Gateways bug: secure, policy secure, and zta gateways stack-based buffer overflowCVE-2025-22457Apr 4, 2025
  12. Ivanti Endpoint Manager (EPM) bug: (epm) absolute path traversalCVE-2024-13161Mar 10, 2025
  13. Ivanti Endpoint Manager (EPM) bug: (epm) absolute path traversalCVE-2024-13160Mar 10, 2025
  14. Ivanti Endpoint Manager (EPM) bug: (epm) absolute path traversalCVE-2024-13159Mar 10, 2025
  15. Ivanti Connect Secure, Policy Secure, and ZTA Gateways bug: secure, policy secure, and zta gateways stack-based buffer overflowCVE-2025-0282Jan 8, 2025
  16. Ivanti Cloud Services Appliance (CSA) bug: services appliance (csa) OS command injectionCVE-2024-9380Oct 9, 2024
  17. Ivanti Cloud Services Appliance (CSA) bug: services appliance (csa) SQL injectionCVE-2024-9379Oct 9, 2024
  18. Ivanti Endpoint Manager (EPM) bug: (epm) SQL injectionCVE-2024-29824Oct 2, 2024
  19. Ivanti Virtual Traffic Manager bug: manager authentication bypassCVE-2024-7593Sep 24, 2024
  20. Ivanti Cloud Services Appliance (CSA) bug: services appliance (csa) path traversalCVE-2024-8963Sep 19, 2024
  21. Ivanti Cloud Services Appliance bug: services appliance OS command injectionCVE-2024-8190Sep 13, 2024
  22. Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) bug: service appliance (epm csa) code injection vulnerabilityCVE-2021-44529Mar 25, 2024
  23. Ivanti Connect Secure, Policy Secure, and Neurons bug: secure, policy secure, and neurons server-side request forgery (SSRF)CVE-2024-21893Jan 31, 2024
  24. Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core bug: (epmm) and mobileiron core authentication bypassCVE-2023-35082Jan 18, 2024
  25. Ivanti Connect Secure and Policy Secure bug: policy secure authentication bypassCVE-2023-46805Jan 10, 2024
  26. Ivanti Connect Secure and Policy Secure bug: policy secure command injectionCVE-2024-21887Jan 10, 2024
  27. Ivanti Sentry bug: authentication bypassCVE-2023-38035Aug 22, 2023
  28. Ivanti Endpoint Manager Mobile (EPMM) bug: (epmm) path traversalCVE-2023-35081Jul 31, 2023
  29. Ivanti Endpoint Manager Mobile (EPMM) bug: authentication bypassCVE-2023-35078Jul 25, 2023
  30. Ivanti MobileIron Multiple Products bug: products remote code executionCVE-2020-15505Nov 3, 2021
  31. Ivanti Pulse Connect Secure bug: connect secure use-after-freeCVE-2021-22893Nov 3, 2021
  32. Ivanti Pulse Connect Secure bug: connect secure code executionCVE-2020-8243Nov 3, 2021
  33. Ivanti Pulse Connect Secure bug: connect secure unrestricted file uploadCVE-2021-22900Nov 3, 2021
  34. Ivanti Pulse Connect Secure bug: connect secure collaboration suite buffer overflowCVE-2021-22894Nov 3, 2021
  35. Ivanti Pulse Connect Secure bug: connect secure code executionCVE-2020-8260Nov 3, 2021
  36. Ivanti Pulse Connect Secure bug: connect secure command injectionCVE-2021-22899Nov 3, 2021
  37. Ivanti Pulse Connect Secure bug: connect secure arbitrary file readCVE-2019-11510Nov 3, 2021
  38. Ivanti Pulse Connect Secure and Pulse Policy Secure bug: connect secure and policy secure command injectionCVE-2019-11539Nov 3, 2021

From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.