Ivanti

Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities

Citrix, Ivanti, patch, Vulnerabilities, vulnerability /

Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities 2026-11-11 at 15:37 By Ionut Arghire Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts. The post Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities Read More »

CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)

0-day, CISA, Don't miss, enterprise, Government, Hot stuff, Ivanti, News, Rapid7, Volexity /

CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) 2026-11-02 at 17:58 By Zeljka Zorz CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an earlier security advisory with details about the flaws. Three flaws chained to gain a foothold […]

CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) Read More »

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

exploited, Featured, Ivanti, Vulnerabilities, Zero-Day /

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain 2026-11-02 at 09:57 By Eduard Kovacs CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. The post Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain appeared first on SecurityWeek. This […]

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain Read More »

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances

0-day, CISA, Defused, Don't miss, Hot stuff, Ivanti, News, security update, Volexity /

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances 2026-10-14 at 11:59 By Zeljka Zorz A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of October […]

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances Read More »

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

Citrix, Fortinet, Ivanti, patches, Vulnerabilities, vulnerability /

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products 2026-10-14 at 10:26 By Ionut Arghire Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products Read More »

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

exploited, Featured, Ivanti, Vulnerabilities, vulnerability, Zero-Day /

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN 2026-10-13 at 21:43 By Eduard Kovacs CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.  The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek. This article is […]

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN Read More »

October 2026 Patch Tuesday forecast: Time for an Office cleanup

Adobe, apple, Expert analysis, Google, Ivanti, Microsoft, Mozilla, News, Patch Tuesday /

October 2026 Patch Tuesday forecast: Time for an Office cleanup 2026-10-09 at 09:32 By Help Net Security September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect to the insane number of CVEs […]

October 2026 Patch Tuesday forecast: Time for an Office cleanup Read More »

Ivanti Patches Critical Flaws Across Enterprise Security Products

Ivanti, Network Security, Vulnerabilities /

Ivanti Patches Critical Flaws Across Enterprise Security Products 2026-09-09 at 13:28 By Ionut Arghire Six critical vulnerabilities in Neurons for ITSM could enable remote code execution, while Sentry and EPMM received patches for authentication bypass flaws. The post Ivanti Patches Critical Flaws Across Enterprise Security Products appeared first on SecurityWeek. This article is an excerpt […]

Ivanti Patches Critical Flaws Across Enterprise Security Products Read More »

September 2026 Patch Tuesday forecast: All we need is more time

apple, Don't miss, Expert analysis, Ivanti, Microsoft, Mozilla, Patch Tuesday, Windows /

September 2026 Patch Tuesday forecast: All we need is more time 2026-09-04 at 09:00 By Help Net Security The Patch Apocalypse is continuing unabated. We are seeing record numbers of patches being released and reported CVEs continue to grow as well. August 2026 Patch Tuesday was the second biggest in history with 398 resolved CVEs: […]

September 2026 Patch Tuesday forecast: All we need is more time Read More »

Ivanti EPM Update Patches Remotely Exploitable Flaws

Ivanti, patch, Vulnerabilities, vulnerability /

Ivanti EPM Update Patches Remotely Exploitable Flaws 2026-08-12 at 11:14 By Ionut Arghire The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service. The post Ivanti EPM Update Patches Remotely Exploitable Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Ivanti EPM Update Patches Remotely Exploitable Flaws Read More »

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow

Fortinet, Ivanti, ServiceNow, Vulnerabilities, vulnerability /

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow 2026-07-15 at 14:02 By Ionut Arghire A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code. The post Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow Read More »

July 2026 Patch Tuesday forecast: Is CVE tracking still practical?

CVE, Don't miss, Expert analysis, Expert corner, Hot stuff, Ivanti, Microsoft, News, Patch Tuesday /

July 2026 Patch Tuesday forecast: Is CVE tracking still practical? 2026-07-10 at 10:30 By Help Net Security I was off by a month in my forecast of record-setting CVE releases from Microsoft. In June, we saw the deluge of over 200 reported CVEs that I expected in May. There were 116 CVEs for Windows 11 […]

July 2026 Patch Tuesday forecast: Is CVE tracking still practical? Read More »

Ivanti Sentry Exploitation Attempts Hitting Honeypots

CISA KEV, exploited, Ivanti, Vulnerabilities, vulnerability /

Ivanti Sentry Exploitation Attempts Hitting Honeypots 2026-06-12 at 12:44 By Ionut Arghire The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges. The post Ivanti Sentry Exploitation Attempts Hitting Honeypots appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Ivanti Sentry Exploitation Attempts Hitting Honeypots Read More »

Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520)

Don't miss, enterprise, gateway, Hot stuff, Ivanti, News, vulnerability, WatchTowr /

Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520) 2026-06-10 at 17:24 By Zeljka Zorz Ivanti has patched two critical vulnerabilities (CVE-2026-10520 and CVE-2026-10523) in Ivanti Sentry and has urged customers to implement the fix right away. Though the vulnerabilities are not known to be actively exploited, security researchers have already released technical details […]

Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520) Read More »

Critical Vulnerabilities Patched in Fortinet, Ivanti Products

Fortinet, Ivanti, Patch Tuesday, patches, Vulnerabilities, vulnerability /

Critical Vulnerabilities Patched in Fortinet, Ivanti Products 2026-06-10 at 12:16 By Ionut Arghire Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution. The post Critical Vulnerabilities Patched in Fortinet, Ivanti Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Vulnerabilities Patched in Fortinet, Ivanti Products Read More »

June 2026 Patch Tuesday forecast: Where are the CVEs?

Adobe, Anthropic, apple, Don't miss, Expert analysis, Expert corner, Ivanti, Microsoft, Mozilla, News, opinion, Oracle /

June 2026 Patch Tuesday forecast: Where are the CVEs? 2026-06-05 at 10:16 By Help Net Security My forecast from last month was only partly right. After the Anthropic Mythos announcements and the deluge of newly discovered vulnerabilities from vendors like Mozilla, Microsoft’s updates were standard fare, 65 CVEs reported in Windows 11 and 58 in […]

June 2026 Patch Tuesday forecast: Where are the CVEs? Read More »

Most pros have seen AI hallucinations in IT operations

AI, automation, enterprise, Ivanti, News, report /

Most pros have seen AI hallucinations in IT operations 2026-06-05 at 09:24 By Anamarija Pogorelec Autonomous AI is taking action inside enterprise IT environments. Software is restarting services, isolating risky devices, and applying patches without waiting for a human to approve the step. The capability is spreading at the same time IT professionals are reporting […]

Most pros have seen AI hallucinations in IT operations Read More »

Fortinet, Ivanti Patch Critical Vulnerabilities

Fortinet, Ivanti, patches, Vulnerabilities, vulnerability, Zoom /

Fortinet, Ivanti Patch Critical Vulnerabilities 2026-05-13 at 12:36 By Ionut Arghire Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure. The post Fortinet, Ivanti Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Fortinet, Ivanti Patch Critical Vulnerabilities Read More »

Ivanti EPMM vulnerability exploited in zero-day attacks (CVE-2026-6973)

0-day, Don't miss, endpoint management, Hot stuff, Ivanti, News, vulnerability /

Ivanti EPMM vulnerability exploited in zero-day attacks (CVE-2026-6973) 2026-05-08 at 13:30 By Zeljka Zorz Ivanti has released fixes for 5 high-severity vulnerabilities in its Endpoint Manager Mobile (EPMM) solution, one of which (CVE-2026-6973) has being exploited as a zero-day by attackers. “We are aware of a very limited number of customers exploited with CVE-2026-6973,” the […]

Ivanti EPMM vulnerability exploited in zero-day attacks (CVE-2026-6973) Read More »

Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks

EPMM, exploited, Ivanti, Vulnerabilities, vulnerability, Zero-Day /

Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks 2026-05-08 at 11:42 By Eduard Kovacs CVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code. The post Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks Read More »

Scroll to Top