ivanti News Articles

Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks

Vendor promises fix for separate privilege-escalation flaw in the coming weeks

16 minutes ago

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st.

5 hours ago

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

CISA says attackers are exploiting an Ivanti Connect Secure authentication bypass to execute commands, steal credentials, and exfiltrate data.

5 hours ago

Attackers chain three Ivanti VPN zero-days for root access

Key points An unknown threat actor, tracked as UTA0576, chained three zero-day vulnerabilities to take root control of a fully patched Ivanti Connect Secure VPN appliance, Volexity said. Ivanti has patched...

9 hours ago

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far - SwapUpdate

Swati KhandelwalOct 13, 2026Vulnerability / Enterprise Security

14 hours ago

Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day

The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold for an out-of-band release.

19 hours ago

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

An attacker exploited three Ivanti Connect Secure zero-days to run commands as root and steal stored credentials from one appliance.

1 day ago

Ivanti warns of Connect Secure zero-day exploited in attacks

Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.

1 day ago

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

Ivanti has patched CVE-2026-104935, a Connect Secure (ICS) zero-day exploit that allows unauthenticated remote code execution.

2 days ago

Ivanti Sentry Flaw Triggers CISA's First 3-Day Federal Patch Mandate, Already Exploited

Ivanti Sentry vulnerability patch is mandatory for federal agencies by June 14 under CISA’s BOD 26-04, which replaces flat CVSS deadlines with a four-variable risk model. Attackers backdoored Sentry

CISA orders feds to patch actively exploited Ivanti flaw by Sunday

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch an actively exploited Ivanti Sentry flaw within three days, as mandated by the newly issued Binding Operational Directive (BOD) 26-04.

Ivanti Sentry Exploitation Attempts Hitting Honeypots

CVE-2026-10520, a critical-severity vulnerability in Ivanti Sentry, was flagged as exploited based on activity observed on honeypots.

Max-Severity Ivanti Sentry Flaw Exploited Within 24 Hours

Initial methods suggest attackers had likely mapped out Ivanti's asset landscape upfront and acted quickly once the exploit became public.

Ivanti Sentry Actively Exploited: CVSS 10.0 Flaw Backdoors Enterprise Mobile Gateways

Ivanti Sentry vulnerability CVE-2026-10520 is now actively exploited: Shadowserver confirmed backdoored enterprise mobile gateways within 24 hours of a public proof-of-concept exploit release.

Ivanti Command Injection Vulnerability Exploited in Attacks Following PoC Release - IT Security News

Threat actors have begun actively exploiting a critical Ivanti Sentry command injection vulnerability just days after a proof-of-concept (PoC) exploit was made public, according to new internet scanning data from the Shadowserver Foundation. The flaw, tracked as CVE-2026-10520, carries a…Read more →

Ivanti Command Injection Vulnerability Exploited in Attacks Following PoC Release

Attackers are actively exploiting a critical Ivanti Sentry command injection flaw days after a public PoC exploit was released.

Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520) - Help Net Security

Ivanti has patched two critical Ivanti Sentry vulnerabilities (CVE-2026-10520, CVE-2026-10523) and urged customers to upgrade quickly.

Max severity Ivanti Sentry vulnerability now exploited in attacks

Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile gateways.

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

Ravie LakshmananJun 10, 2026Vulnerability / Patch Management

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

Fortinet, Ivanti, and SAP patched critical flaws up to CVSS 10.0, reducing RCE, admin takeover, and data exposure risks.

Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520) - IT Security News

Ivanti has patched two critical vulnerabilities (CVE-2026-10520 and CVE-2026-10523) in Ivanti Sentry and has urged customers to implement the fix right away. Though the vulnerabilities are not known to be actively exploited, security researchers have already released technical details about…Read mor...

Ivanti tells Sentry customers to patch now as critical bugs hit 10.0 and 9.9

Remote, unauthenticated RCE with root privileges is about as bad as it gets

Ivanti tells Sentry customers to patch now as critical bugs hit 10.0 and 9.9

Remote, unauthenticated RCE with root privileges is about as bad as it gets

CISA gives feds four days to patch Ivanti flaw exploited as zero-day

CISA has given U.S. federal agencies four days to secure their networks against a high-severity vulnerability in Ivanti Endpoint Manager Mobile (EPMM) exploited in zero-day attacks.

Ivanti EPMM vulnerability exploited in zero-day attacks (CVE-2026-6973) - IT Security News

Ivanti has released fixes for 5 high-severity vulnerabilities in its Endpoint Manager Mobile (EPMM) solution, one of which (CVE-2026-6973) has being exploited as a zero-day by attackers. “We are aware of a very limited number of customers exploited with CVE-2026-6973,”…Read more →