Vendor dossier / #8
Ivanti vulnerabilities in CISA KEV
Answer CISA's KEV catalog lists 35 Ivanti vulnerabilities as of catalog 2026.09.23, 2% of all 1,721 entries and rank 8 of 283 vendors. The first was added on 2021-11-03 and the most recent on 2026-06-11; 12 are flagged as used in ransomware campaigns.
- KEV entries
- 352% of catalog
- Last 90 days
- +0added
- Ransomware: known
- 1234.3%
- Products
- 15distinct
- First added
- 2021-11-03
- Latest added
- 2026-06-11
- Median days to due
- 21
- Open deadlines
- 0federal
TAdditions per quarter
Table view (by year)
| Year | Added |
|---|---|
| 2021 | 9 |
| 2022 | 0 |
| 2023 | 3 |
| 2024 | 11 |
| 2025 | 7 |
| 2026 | 5 |
QCommon questions
How many Ivanti vulnerabilities are in CISA KEV?
35, as of KEV catalog 2026.09.23 (released 2026-09-23). That is 2% of the catalog.
Which Ivanti product has the most KEV entries?
Endpoint Manager Mobile (EPMM), with 7 entries. 15 products appear in total.
How many Ivanti KEV vulnerabilities are linked to ransomware?
12 of 35 (34.3%) are flagged by CISA as known to be used in ransomware campaigns.
When was the latest Ivanti vulnerability added to KEV?
2026-06-11 (CVE-2026-10520).
What is the most common weakness in Ivanti KEV entries?
CWE-94 (Code injection), listed on 7 entries.
PProducts
| Product | Entries | Share of vendor |
|---|---|---|
| Endpoint Manager Mobile (EPMM) | 7 | 20% |
| Pulse Connect Secure | 7 | 20% |
| Endpoint Manager (EPM) | 4 | 11.4% |
| Cloud Services Appliance (CSA) | 3 | 8.6% |
| Sentry | 2 | 5.7% |
| Connect Secure, Policy Secure, and ZTA Gateways | 2 | 5.7% |
| Connect Secure and Policy Secure | 2 | 5.7% |
| Endpoint Manager (EPM) | 1 | 2.9% |
| Virtual Traffic Manager | 1 | 2.9% |
| Cloud Services Appliance | 1 | 2.9% |
| Endpoint Manager Cloud Service Appliance (EPM CSA) | 1 | 2.9% |
| Connect Secure, Policy Secure, and Neurons | 1 | 2.9% |
| Endpoint Manager Mobile (EPMM) and MobileIron Core | 1 | 2.9% |
| MobileIron Multiple Products | 1 | 2.9% |
| Pulse Connect Secure and Pulse Policy Secure | 1 | 2.9% |
WWeaknesses
| CWE | Entries | Share of vendor |
|---|---|---|
| CWE-94 Code injection | 7 | 20% |
| CWE-287 Improper authentication | 5 | 14.3% |
| CWE-78 OS command injection | 3 | 8.6% |
| CWE-36 | 3 | 8.6% |
| CWE-77 Command injection | 3 | 8.6% |
| CWE-22 Path traversal | 3 | 8.6% |
| CWE-288 Authentication bypass via alternate path | 2 | 5.7% |
| CWE-121 Stack-based buffer overflow | 2 | 5.7% |
| CWE-89 SQL injection | 2 | 5.7% |
| CWE-20 Improper input validation | 1 | 2.9% |
| CWE-303 | 1 | 2.9% |
| CWE-918 Server-side request forgery | 1 | 2.9% |
EAll 35 entries
| CVE | Product | Vulnerability | Added | Due | Ransomware | CWE |
|---|---|---|---|---|---|---|
| CVE-2026-10520 | Sentry | Ivanti Sentry OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2026-6973 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability | Unknown | CWE-20 | ||
| CVE-2026-1340 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Unknown | CWE-94 | ||
| CVE-2026-1603 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | Unknown | CWE-288 | ||
| CVE-2026-1281 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Unknown | CWE-94 | ||
| CVE-2025-4428 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Unknown | CWE-94 | ||
| CVE-2025-4427 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability | Unknown | CWE-288 | ||
| CVE-2025-22457 | Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Known | CWE-121 | ||
| CVE-2024-13161 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Unknown | CWE-36 | ||
| CVE-2024-13160 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Unknown | CWE-36 | ||
| CVE-2024-13159 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Unknown | CWE-36 | ||
| CVE-2025-0282 | Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Known | CWE-121 | ||
| CVE-2024-9380 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | Unknown | CWE-77 | ||
| CVE-2024-9379 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | Unknown | CWE-89 | ||
| CVE-2024-29824 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | Unknown | CWE-89 | ||
| CVE-2024-7593 | Virtual Traffic Manager | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | Unknown | CWE-287, CWE-303 | ||
| CVE-2024-8963 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2024-8190 | Cloud Services Appliance | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2021-44529 | Endpoint Manager Cloud Service Appliance (EPM CSA) | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | Known | CWE-94 | ||
| CVE-2024-21893 | Connect Secure, Policy Secure, and Neurons | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | Known | CWE-918 | ||
| CVE-2023-35082 | Endpoint Manager Mobile (EPMM) and MobileIron Core | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | Known | CWE-287 | ||
| CVE-2024-21887 | Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | Known | CWE-77 | ||
| CVE-2023-46805 | Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | Known | CWE-287 | ||
| CVE-2023-38035 | Sentry | Ivanti Sentry Authentication Bypass Vulnerability | Known | CWE-863 | ||
| CVE-2023-35081 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2023-35078 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | Known | CWE-287 | ||
| CVE-2021-22900 | Pulse Connect Secure | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | Unknown | CWE-94 | ||
| CVE-2021-22899 | Pulse Connect Secure | Ivanti Pulse Connect Secure Command Injection Vulnerability | Unknown | CWE-77 | ||
| CVE-2021-22894 | Pulse Connect Secure | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | Unknown | CWE-94 | ||
| CVE-2021-22893 | Pulse Connect Secure | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | Known | CWE-287 | ||
| CVE-2020-8260 | Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | Unknown | CWE-434 | ||
| CVE-2020-8243 | Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | Unknown | CWE-94 | ||
| CVE-2020-15505 | MobileIron Multiple Products | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | Unknown | CWE-706 | ||
| CVE-2019-11539 | Pulse Connect Secure and Pulse Policy Secure | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | Known | CWE-78 | ||
| CVE-2019-11510 | Pulse Connect Secure | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | Known | CWE-22 |
Cite this
CISA's Known Exploited Vulnerabilities catalog lists 35 Ivanti vulnerabilities (2% of all entries). Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/vendors/ivanti/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23. Vendor names are CISA's vendorProject strings; Telemetry states no facts about Ivanti beyond this data.