Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
38 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 30, 2026 | CVE-2026-118527 | Ivanti · Connect Secure | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability | Medium 4.3 | 0.8% | Nov 13, 2026 |
| Oct 30, 2026 | CVE-2026-111357 | Ivanti · Connect Secure | Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability | High 7.0 | 0.5% | Nov 2, 2026 |
| Oct 13, 2026 | CVE-2026-104935 | Ivanti · Connect Secure | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | High 8.6 | 88.9% | Oct 16, 2026 |
| Jun 11, 2026 | CVE-2026-10520 | Ivanti · Sentry | Ivanti Sentry OS Command Injection Vulnerability | Critical 10.0 | 99.9% | Jun 14, 2026 |
| May 7, 2026 | CVE-2026-6973 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | High 7.2 | 34.5% | May 10, 2026 |
| Apr 8, 2026 | CVE-2026-1340 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Critical 9.8 | 98.6% | Apr 11, 2026 |
| Mar 9, 2026 | CVE-2026-1603 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | High 8.6 | 88.3% | Mar 23, 2026 |
| Jan 29, 2026 | CVE-2026-1281 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Critical 9.8 | 98.7% | Feb 1, 2026 |
| May 19, 2025 | CVE-2025-4428 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | High 7.2 | 88.0% | Jun 9, 2025 |
| May 19, 2025 | CVE-2025-4427 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | Medium 5.3 | 99.9% | Jun 9, 2025 |
| Apr 4, 2025 | CVE-2025-22457 Ransomware | Ivanti · Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Critical 9.0 | 100.0% | Apr 11, 2025 |
| Mar 10, 2025 | CVE-2024-13161 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Critical 9.8 | 89.8% | Mar 31, 2025 |
| Mar 10, 2025 | CVE-2024-13160 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Critical 9.8 | 91.0% | Mar 31, 2025 |
| Mar 10, 2025 | CVE-2024-13159 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Critical 9.8 | 100.0% | Mar 31, 2025 |
| Jan 8, 2025 | CVE-2025-0282 Ransomware | Ivanti · Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Critical 9.0 | 100.0% | Jan 15, 2025 |
| Oct 9, 2024 | CVE-2024-9380 | Ivanti · Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | High 7.2 | 58.3% | Oct 30, 2024 |
| Oct 9, 2024 | CVE-2024-9379 | Ivanti · Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | Medium 6.5 | 44.3% | Oct 30, 2024 |
| Oct 2, 2024 | CVE-2024-29824 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | Critical 9.6 | 99.9% | Oct 23, 2024 |
| Sep 24, 2024 | CVE-2024-7593 | Ivanti · Virtual Traffic Manager | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | Critical 9.8 | 100.0% | Oct 15, 2024 |
| Sep 19, 2024 | CVE-2024-8963 | Ivanti · Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | Critical 9.4 | 98.6% | Oct 10, 2024 |
| Sep 13, 2024 | CVE-2024-8190 | Ivanti · Cloud Services Appliance | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | High 7.2 | 88.5% | Oct 4, 2024 |
| Mar 25, 2024 | CVE-2021-44529 Ransomware | Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA) | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | Critical 9.8 | 99.1% | Apr 15, 2024 |
| Jan 31, 2024 | CVE-2024-21893 Ransomware | Ivanti · Connect Secure, Policy Secure, and Neurons | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | High 8.2 | 100.0% | Feb 2, 2024 |
| Jan 18, 2024 | CVE-2023-35082 Ransomware | Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | Critical 10.0 | 100.0% | Feb 8, 2024 |
| Jan 10, 2024 | CVE-2024-21887 Ransomware | Ivanti · Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | Critical 9.1 | 100.0% | Jan 22, 2024 |
| Jan 10, 2024 | CVE-2023-46805 Ransomware | Ivanti · Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | High 8.2 | 100.0% | Jan 22, 2024 |
| Aug 22, 2023 | CVE-2023-38035 Ransomware | Ivanti · Sentry | Ivanti Sentry Authentication Bypass Vulnerability | Critical 9.8 | 100.0% | Sep 12, 2023 |
| Jul 31, 2023 | CVE-2023-35081 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | High 7.2 | 63.6% | Aug 21, 2023 |
| Jul 25, 2023 | CVE-2023-35078 Ransomware | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | Critical 10.0 | 100.0% | Aug 15, 2023 |
| Nov 3, 2021 | CVE-2021-22900 | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | High 7.2 | 14.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2021-22899 | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Command Injection Vulnerability | High 8.8 | 22.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2021-22894 | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | High 8.8 | 41.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2021-22893 Ransomware | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | Critical 10.0 | 47.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8260 | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | High 7.2 | 96.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8243 | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | High 7.2 | 90.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-15505 | Ivanti · MobileIron Multiple Products | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | Critical 9.8 | 99.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-11539 Ransomware | Ivanti · Pulse Connect Secure and Pulse Policy Secure | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | High 8.0 | 98.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-11510 Ransomware | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | Critical 9.9 | 100.0% | May 3, 2022 |