https://exploit-radar.com/en/flux/marques/ivanti.xml Exploit Radar: exploited Ivanti vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Ivanti products. 2026-06-11T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-10520/ CVE-2026-10520 — Ivanti Sentry 2026-06-11T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on June 11, 2026. https://exploit-radar.com/en/cve/CVE-2026-6973/ CVE-2026-6973 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2026-05-07T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on May 7, 2026. https://exploit-radar.com/en/cve/CVE-2026-1340/ CVE-2026-1340 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2026-04-08T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 8, 2026. https://exploit-radar.com/en/cve/CVE-2026-1603/ CVE-2026-1603 — Ivanti Endpoint Manager (EPM) 2026-03-09T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on March 9, 2026. https://exploit-radar.com/en/cve/CVE-2026-1281/ CVE-2026-1281 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2026-01-29T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on January 29, 2026. https://exploit-radar.com/en/cve/CVE-2025-4428/ CVE-2025-4428 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2025-05-19T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2025. https://exploit-radar.com/en/cve/CVE-2025-4427/ CVE-2025-4427 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2025-05-19T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 19, 2025. https://exploit-radar.com/en/cve/CVE-2025-22457/ CVE-2025-22457 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2025-04-04T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 7 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on April 4, 2025. https://exploit-radar.com/en/cve/CVE-2024-13159/ CVE-2024-13159 — Ivanti Endpoint Manager (EPM) 2025-03-10T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 10, 2025. https://exploit-radar.com/en/cve/CVE-2024-13160/ CVE-2024-13160 — Ivanti Endpoint Manager (EPM) 2025-03-10T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 10, 2025. https://exploit-radar.com/en/cve/CVE-2024-13161/ CVE-2024-13161 — Ivanti Endpoint Manager (EPM) 2025-03-10T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. For cloud services, follow the guidance from Ivanti. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 10, 2025. https://exploit-radar.com/en/cve/CVE-2025-0282/ CVE-2025-0282 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2025-01-08T00:00:00Z CISA has issued specific instructions for this vulnerability: read the original text and the NVD entry. CISA deadline: 7 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 8, 2025. https://exploit-radar.com/en/cve/CVE-2024-9379/ CVE-2024-9379 — Ivanti Cloud Services Appliance (CSA) 2024-10-09T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on October 9, 2024. https://exploit-radar.com/en/cve/CVE-2024-9380/ CVE-2024-9380 — Ivanti Cloud Services Appliance (CSA) 2024-10-09T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on October 9, 2024. https://exploit-radar.com/en/cve/CVE-2024-29824/ CVE-2024-29824 — Ivanti Endpoint Manager (EPM) 2024-10-02T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 2, 2024. https://exploit-radar.com/en/cve/CVE-2024-7593/ CVE-2024-7593 — Ivanti Virtual Traffic Manager (vTM) 2024-09-24T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 24, 2024. https://exploit-radar.com/en/cve/CVE-2024-8963/ CVE-2024-8963 — Ivanti Cloud Services Appliance (CSA) 2024-09-19T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on September 19, 2024. https://exploit-radar.com/en/cve/CVE-2024-8190/ CVE-2024-8190 — Ivanti Cloud Services Appliance (CSA) 2024-09-13T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on September 13, 2024. https://exploit-radar.com/en/cve/CVE-2021-44529/ CVE-2021-44529 — Ivanti Cloud Services Appliance (CSA) 2024-03-25T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2024. https://exploit-radar.com/en/cve/CVE-2024-21893/ CVE-2024-21893 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2024-01-31T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 2 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 31, 2024. https://exploit-radar.com/en/cve/CVE-2023-35082/ CVE-2023-35082 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2024-01-18T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 18, 2024. https://exploit-radar.com/en/cve/CVE-2024-21887/ CVE-2024-21887 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2024-01-10T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 12 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 10, 2024. https://exploit-radar.com/en/cve/CVE-2023-46805/ CVE-2023-46805 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2024-01-10T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 12 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 10, 2024. https://exploit-radar.com/en/cve/CVE-2023-38035/ CVE-2023-38035 — Ivanti Sentry 2023-08-22T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on August 22, 2023. https://exploit-radar.com/en/cve/CVE-2023-35081/ CVE-2023-35081 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2023-07-31T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 31, 2023. https://exploit-radar.com/en/cve/CVE-2023-35078/ CVE-2023-35078 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2023-07-25T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 25, 2023. https://exploit-radar.com/en/cve/CVE-2020-8218/ CVE-2020-8218 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2022-03-07T00:00:00Z Apply the security update from Ivanti. CISA deadline: 184 days. Added to CISA’s catalog of exploited vulnerabilities on March 7, 2022. https://exploit-radar.com/en/cve/CVE-2019-11510/ CVE-2019-11510 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2021-11-03T00:00:00Z Apply the security update from Ivanti. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-22893/ CVE-2021-22893 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2021-11-03T00:00:00Z Apply the security update from Ivanti. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-15505/ CVE-2020-15505 — Ivanti Endpoint Manager Mobile (EPMM, ex-MobileIron) 2021-11-03T00:00:00Z Apply the security update from Ivanti. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-22894/ CVE-2021-22894 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2021-11-03T00:00:00Z Apply the security update from Ivanti. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-22899/ CVE-2021-22899 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2021-11-03T00:00:00Z Apply the security update from Ivanti. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-11539/ CVE-2019-11539 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2021-11-03T00:00:00Z Apply the security update from Ivanti. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-8243/ CVE-2020-8243 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2021-11-03T00:00:00Z Apply the security update from Ivanti. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-8260/ CVE-2020-8260 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2021-11-03T00:00:00Z Apply the security update from Ivanti. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-22900/ CVE-2021-22900 — Ivanti Connect Secure / Policy Secure (ex-Pulse Secure) 2021-11-03T00:00:00Z Apply the security update from Ivanti. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.