Section
Advisories
Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.
9 matching records, 6 with confirmed exploitation.
-
CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure
Update October 30, 2026 : CISA has updated this Alert to: (1) include CVE-2026-111357 and CVE-2026-118527 and reflect their addition to the Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026; and (2) update the…
-
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935 , affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat…
-
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti…
-
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function…
-
October 2026 Security Update
Security is foundational to how Ivanti builds, tests, and supports our products. We continue to strengthen our secure product development practices through vulnerability discovery, responsible disclosure processes, security…
-
October 2026 Patch Tuesday
What's happened since September Patch Tuesday Here’s a fun fact to start this month. Ivanti’s Vulnerability Knowledge Base is now tracking more than 406,000 CVEs. Over 78,000 of them were disclosed in 2026 alone, which is more…
-
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber…
-
A Vulnerability in Ivanti Connect Secure Could Allow for Arbitrary Code Execution
A vulnerability has been discovered in Ivanti Connect Secure (ICS) that could allow for arbitrary code execution. Ivanti Connect Secure is an enterprise-grade SSL VPN and zero-trust remote access gateway. Successful exploitation…
Reuse this view
Same filters as JSON: /api/items?category=advisory&window=30d&vendor=Ivanti&limit=100. RSS for this section: feed.xml.