https://exploit-radar.com/en/flux/categories/supervision-itsm.xml Exploit Radar: Monitoring, ITSM and asset management The latest additions to CISA’s catalog of exploited vulnerabilities in the “Monitoring, ITSM and asset management” category (indicative classification). 2026-06-11T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-10520/ CVE-2026-10520 — Ivanti Sentry 2026-06-11T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on June 11, 2026. https://exploit-radar.com/en/cve/CVE-2026-6973/ CVE-2026-6973 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2026-05-07T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on May 7, 2026. https://exploit-radar.com/en/cve/CVE-2025-32975/ CVE-2025-32975 — Quest KACE Systems Management Appliance (SMA) 2026-04-20T00:00:00Z Apply the patches or mitigations from Quest; if none are available, stop using the product. For cloud services, follow the guidance from Quest. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 20, 2026. https://exploit-radar.com/en/cve/CVE-2026-21643/ CVE-2026-21643 — Fortinet FortiClient EMS 2026-04-13T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2026-1340/ CVE-2026-1340 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2026-04-08T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 8, 2026. https://exploit-radar.com/en/cve/CVE-2026-35616/ CVE-2026-35616 — Fortinet FortiClient EMS 2026-04-06T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 6, 2026. https://exploit-radar.com/en/cve/CVE-2025-26399/ CVE-2025-26399 — SolarWinds Web Help Desk 2026-03-09T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. For cloud services, follow the guidance from SolarWinds. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 9, 2026. https://exploit-radar.com/en/cve/CVE-2021-22054/ CVE-2021-22054 — Omnissa (ex-VMware EUC) Workspace ONE UEM (AirWatch) 2026-03-09T00:00:00Z Apply the patches or mitigations from Omnissa (ex-VMware EUC); if none are available, stop using the product. For cloud services, follow the guidance from Omnissa (ex-VMware EUC). CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on March 9, 2026. https://exploit-radar.com/en/cve/CVE-2026-1603/ CVE-2026-1603 — Ivanti Endpoint Manager (EPM) 2026-03-09T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on March 9, 2026. https://exploit-radar.com/en/cve/CVE-2026-22719/ CVE-2026-22719 — VMware (Broadcom) Aria Operations (ex-vRealize Operations) 2026-03-03T00:00:00Z Apply the patches or mitigations from VMware (Broadcom); if none are available, stop using the product. For cloud services, follow the guidance from VMware (Broadcom). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2026. https://exploit-radar.com/en/cve/CVE-2024-43468/ CVE-2024-43468 — Microsoft Configuration Manager 2026-02-12T00:00:00Z Apply the patches or mitigations from Microsoft; if none are available, stop using the product. For cloud services, follow the guidance from Microsoft. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 12, 2026. https://exploit-radar.com/en/cve/CVE-2025-40536/ CVE-2025-40536 — SolarWinds Web Help Desk 2026-02-12T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. For cloud services, follow the guidance from SolarWinds. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on February 12, 2026. https://exploit-radar.com/en/cve/CVE-2025-40551/ CVE-2025-40551 — SolarWinds Web Help Desk 2026-02-03T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. For cloud services, follow the guidance from SolarWinds. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on February 3, 2026. https://exploit-radar.com/en/cve/CVE-2026-1281/ CVE-2026-1281 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2026-01-29T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on January 29, 2026. https://exploit-radar.com/en/cve/CVE-2025-37164/ CVE-2025-37164 — HPE OneView 2026-01-07T00:00:00Z Apply the patches or mitigations from HPE; if none are available, stop using the product. For cloud services, follow the guidance from HPE. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 7, 2026. https://exploit-radar.com/en/cve/CVE-2025-61932/ CVE-2025-61932 — Motex LANSCOPE Endpoint Manager 2025-10-22T00:00:00Z Apply the patches or mitigations from Motex; if none are available, stop using the product. For cloud services, follow the guidance from Motex. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 22, 2025. https://exploit-radar.com/en/cve/CVE-2016-7836/ CVE-2016-7836 — SKYSEA Client View 2025-10-14T00:00:00Z Apply the patches or mitigations from SKYSEA; if none are available, stop using the product. For cloud services, follow the guidance from SKYSEA. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 14, 2025. https://exploit-radar.com/en/cve/CVE-2021-43798/ CVE-2021-43798 — Grafana Labs Grafana 2025-10-09T00:00:00Z Apply the patches or mitigations from Grafana Labs; if none are available, stop using the product. For cloud services, follow the guidance from Grafana Labs. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 9, 2025. https://exploit-radar.com/en/cve/CVE-2025-2776/ CVE-2025-2776 — SysAid On-Prem 2025-07-22T00:00:00Z Apply the patches or mitigations from SysAid; if none are available, stop using the product. For cloud services, follow the guidance from SysAid. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 22, 2025. https://exploit-radar.com/en/cve/CVE-2025-2775/ CVE-2025-2775 — SysAid On-Prem 2025-07-22T00:00:00Z Apply the patches or mitigations from SysAid; if none are available, stop using the product. For cloud services, follow the guidance from SysAid. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 22, 2025. https://exploit-radar.com/en/cve/CVE-2025-4428/ CVE-2025-4428 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2025-05-19T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2025. https://exploit-radar.com/en/cve/CVE-2025-4427/ CVE-2025-4427 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2025-05-19T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2025. https://exploit-radar.com/en/cve/CVE-2024-20439/ CVE-2024-20439 — Cisco Smart Licensing Utility 2025-03-31T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 31, 2025. https://exploit-radar.com/en/cve/CVE-2024-13159/ CVE-2024-13159 — Ivanti Endpoint Manager (EPM) 2025-03-10T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 10, 2025. https://exploit-radar.com/en/cve/CVE-2024-13160/ CVE-2024-13160 — Ivanti Endpoint Manager (EPM) 2025-03-10T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 10, 2025. https://exploit-radar.com/en/cve/CVE-2024-13161/ CVE-2024-13161 — Ivanti Endpoint Manager (EPM) 2025-03-10T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 10, 2025. https://exploit-radar.com/en/cve/CVE-2024-4885/ CVE-2024-4885 — Progress WhatsUp Gold 2025-03-03T00:00:00Z Apply the patches or mitigations from Progress; if none are available, stop using the product. For cloud services, follow the guidance from Progress. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2025. https://exploit-radar.com/en/cve/CVE-2018-19410/ CVE-2018-19410 — Paessler PRTG Network Monitor 2025-02-04T00:00:00Z Apply the patches or mitigations from Paessler; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 4, 2025. https://exploit-radar.com/en/cve/CVE-2018-9276/ CVE-2018-9276 — Paessler PRTG Network Monitor 2025-02-04T00:00:00Z Apply the patches or mitigations from Paessler; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 4, 2025. https://exploit-radar.com/en/cve/CVE-2024-9537/ CVE-2024-9537 — ScienceLogic SL1 2024-10-21T00:00:00Z Apply the patches or mitigations from ScienceLogic; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 21, 2024. https://exploit-radar.com/en/cve/CVE-2024-28987/ CVE-2024-28987 — SolarWinds Web Help Desk 2024-10-15T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 15, 2024. https://exploit-radar.com/en/cve/CVE-2024-9379/ CVE-2024-9379 — Ivanti Cloud Services Appliance (CSA) 2024-10-09T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on October 9, 2024. https://exploit-radar.com/en/cve/CVE-2024-9380/ CVE-2024-9380 — Ivanti Cloud Services Appliance (CSA) 2024-10-09T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on October 9, 2024. https://exploit-radar.com/en/cve/CVE-2024-29824/ CVE-2024-29824 — Ivanti Endpoint Manager (EPM) 2024-10-02T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 2, 2024. https://exploit-radar.com/en/cve/CVE-2024-8963/ CVE-2024-8963 — Ivanti Cloud Services Appliance (CSA) 2024-09-19T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on September 19, 2024. https://exploit-radar.com/en/cve/CVE-2024-6670/ CVE-2024-6670 — Progress WhatsUp Gold 2024-09-16T00:00:00Z Apply the patches or mitigations from Progress; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on September 16, 2024. https://exploit-radar.com/en/cve/CVE-2024-8190/ CVE-2024-8190 — Ivanti Cloud Services Appliance (CSA) 2024-09-13T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on September 13, 2024. https://exploit-radar.com/en/cve/CVE-2024-28986/ CVE-2024-28986 — SolarWinds Web Help Desk 2024-08-15T00:00:00Z Apply the patches or mitigations from SolarWinds; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 15, 2024. https://exploit-radar.com/en/cve/CVE-2024-4879/ CVE-2024-4879 — ServiceNow Now Platform 2024-07-29T00:00:00Z Apply the patches or mitigations from ServiceNow; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 29, 2024. https://exploit-radar.com/en/cve/CVE-2024-5217/ CVE-2024-5217 — ServiceNow Now Platform 2024-07-29T00:00:00Z Apply the patches or mitigations from ServiceNow; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 29, 2024. https://exploit-radar.com/en/cve/CVE-2021-44529/ CVE-2021-44529 — Ivanti Cloud Services Appliance (CSA) 2024-03-25T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2024. https://exploit-radar.com/en/cve/CVE-2023-48788/ CVE-2023-48788 — Fortinet FortiClient EMS 2024-03-25T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2024. https://exploit-radar.com/en/cve/CVE-2023-35082/ CVE-2023-35082 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2024-01-18T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 18, 2024. https://exploit-radar.com/en/cve/CVE-2023-47246/ CVE-2023-47246 — SysAid On-Prem 2023-11-13T00:00:00Z Apply the patches or mitigations from SysAid; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 13, 2023. https://exploit-radar.com/en/cve/CVE-2023-38035/ CVE-2023-38035 — Ivanti Sentry 2023-08-22T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 22, 2023. https://exploit-radar.com/en/cve/CVE-2023-35081/ CVE-2023-35081 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2023-07-31T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 31, 2023. https://exploit-radar.com/en/cve/CVE-2023-35078/ CVE-2023-35078 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2023-07-25T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 25, 2023. https://exploit-radar.com/en/cve/CVE-2023-20887/ CVE-2023-20887 — VMware (Broadcom) Aria Operations for Networks (ex-vRealize Network Insight) 2023-06-22T00:00:00Z Apply the security update from VMware (Broadcom). CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 22, 2023. https://exploit-radar.com/en/cve/CVE-2022-35914/ CVE-2022-35914 — Teclib GLPI 2023-03-07T00:00:00Z Apply the security update from Teclib. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 7, 2023. https://exploit-radar.com/en/cve/CVE-2022-46169/ CVE-2022-46169 — Cacti 2023-02-16T00:00:00Z Apply the security update from Cacti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 16, 2023.