Firewalls, VPNs and routers

Ivanti security incident history

Updated Oct 26, 2026. Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 36 actively exploited security flaws for Ivanti, dated Nov 3, 2021 to Oct 13, 2026. Sources checked: the California and Washington Attorney General breach lists and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

None found in the sources we check.

Got a breach letter from Ivanti? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in Ivanti products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

1. Oct 13, 2026Exploited flaw

   Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (CVE-2026-104935). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

2. Jun 11, 2026Exploited flaw

   Ivanti Sentry OS Command Injection Vulnerability (CVE-2026-10520). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

3. May 7, 2026Exploited flaw

   Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability (CVE-2026-6973). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

4. Apr 8, 2026Exploited flaw

   Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability (CVE-2026-1340). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

5. Mar 9, 2026Exploited flaw

   Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability (CVE-2026-1603). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

6. Jan 29, 2026Exploited flaw

   Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability (CVE-2026-1281). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

7. May 19, 2025Exploited flaw

   Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability (CVE-2025-4427). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

8. May 19, 2025Exploited flaw

   Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability (CVE-2025-4428). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

9. Apr 4, 2025Exploited flaw

   Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability (CVE-2025-22457). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

   Source: CISA Known Exploited Vulnerabilities catalog

10. Mar 10, 2025Exploited flaw

    Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CVE-2024-13159). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

11. Mar 10, 2025Exploited flaw

    Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CVE-2024-13160). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

12. Mar 10, 2025Exploited flaw

    Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CVE-2024-13161). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

13. Jan 8, 2025Exploited flaw

    Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability (CVE-2025-0282). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

14. Oct 9, 2024Exploited flaw

    Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability (CVE-2024-9379). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

15. Oct 9, 2024Exploited flaw

    Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability (CVE-2024-9380). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

16. Oct 2, 2024Exploited flaw

    Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability (CVE-2024-29824). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

17. Sep 24, 2024Exploited flaw

    Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability (CVE-2024-7593). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

18. Sep 19, 2024Exploited flaw

    Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability (CVE-2024-8963). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

19. Sep 13, 2024Exploited flaw

    Ivanti Cloud Services Appliance OS Command Injection Vulnerability (CVE-2024-8190). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

20. Mar 25, 2024Exploited flaw

    Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability (CVE-2021-44529). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

21. Jan 31, 2024Exploited flaw

    Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-21893). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

22. Jan 18, 2024Exploited flaw

    Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability (CVE-2023-35082). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

23. Jan 10, 2024Exploited flaw

    Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability (CVE-2023-46805). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

24. Jan 10, 2024Exploited flaw

    Ivanti Connect Secure and Policy Secure Command Injection Vulnerability (CVE-2024-21887). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

25. Aug 22, 2023Exploited flaw

    Ivanti Sentry Authentication Bypass Vulnerability (CVE-2023-38035). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

26. Jul 31, 2023Exploited flaw

    Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability (CVE-2023-35081). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

27. Jul 25, 2023Exploited flaw

    Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability (CVE-2023-35078). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

28. Nov 3, 2021Exploited flaw

    Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability (CVE-2019-11510). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

29. Nov 3, 2021Exploited flaw

    Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability (CVE-2019-11539). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

30. Nov 3, 2021Exploited flaw

    Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability (CVE-2020-15505). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

31. Nov 3, 2021Exploited flaw

    Ivanti Pulse Connect Secure Code Execution Vulnerability (CVE-2020-8243). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

32. Nov 3, 2021Exploited flaw

    Ivanti Pulse Connect Secure Code Execution Vulnerability (CVE-2020-8260). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

33. Nov 3, 2021Exploited flaw

    Ivanti Pulse Connect Secure Use-After-Free Vulnerability (CVE-2021-22893). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

34. Nov 3, 2021Exploited flaw

    Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability (CVE-2021-22894). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

35. Nov 3, 2021Exploited flaw

    Ivanti Pulse Connect Secure Command Injection Vulnerability (CVE-2021-22899). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

36. Nov 3, 2021Exploited flaw

    Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability (CVE-2021-22900). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "Ivanti security incident history," vendorhistory.com/vendor/ivanti, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.