#Ivanti
All CosmicBytez Labs articles tagged #Ivanti, across news, security advisories, how-to guides, and projects.
- News
Honeypots Log 105 Attacks on Ivanti Connect Secure Ahead of CISA Deadline
Previdian logged 105 exploit attempts from 50 IPs against the Ivanti ICS zero-day chain as CISA's Oct 16 federal patch deadline nears.
- News
Ivanti Connect Secure Zero-Day Attacks Highlight Vendor Patching Hurdles
UTA0576 chained CVE-2026-104935 with two more flaws for root-level RCE on patched Ivanti Connect Secure VPNs after a July fix missed the full bypass.
- News
Ivanti Connect Secure Zero-Day Chain Gave Attackers Root Access to Fully Patched VPNs
An actor Volexity calls UTA0576 chained 3 Ivanti Connect Secure zero-days for unauthenticated root access; only 2 of 3 flaws are patched.
- Security
CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing
Ivanti confirms active exploitation of a pre-auth spoofing flaw in Connect Secure VPN gateways that lets attackers execute arbitrary commands remotely.
- Newsletter
Oct 13 Digest: Ivanti's VPN Root-Access Chain, Microsoft's Record Patch Tuesday, $93M Ledger Implant Heist
This week: an Ivanti zero-day chain gave root access to patched VPNs, Microsoft shipped a record Patch Tuesday, and a $93M Ledger hardware implant surfaced.
- Security
CVE-2026-12645 & CVE-2026-12646: Ivanti Neurons for ITSM Missing-Authorization RCE Flaws
Two CVSS 9.9 missing-authorization bugs in Ivanti Neurons for ITSM let any authenticated user run code on the server. On-prem admins must patch.
- Security
CVE-2026-10520: Ivanti Sentry OS Command Injection — CVSS 10.0
A maximum-severity OS command injection vulnerability in Ivanti Sentry allows unauthenticated remote attackers to achieve root-level code execution. Patch...
- News
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL
A coordinated wave of critical security patches landed this week from Ivanti, Fortinet, SAP, VMware, and n8n. Topping the list is CVE-2026-8043 in Ivanti...
- Security
CVE-2026-8043: Ivanti Xtraction File Control & HTML
A critical vulnerability in Ivanti Xtraction before version 2026.2 allows remote authenticated attackers to read sensitive files and write arbitrary HTML...
- News
Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation
Ivanti has disclosed a high-severity improper input validation vulnerability in Endpoint Manager Mobile (EPMM) that is being actively exploited in the...
- News
Ivanti Warns of New EPMM Flaw Exploited in Zero-Day Attacks
Ivanti has issued an urgent advisory warning customers to patch a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) that...
- News
CISA Gives Federal Agencies Four Days to Patch Actively
CISA has added a high-severity Ivanti Endpoint Manager Mobile vulnerability to the Known Exploited Vulnerabilities catalog and issued an emergency...
- News
Ivanti Customers Confront Yet Another Actively Exploited
Attackers are actively exploiting a new zero-day vulnerability in Ivanti Endpoint Manager Mobile (EPMM), the latest in a long series of critical flaws...
- Security
CVE-2026-1340: Ivanti EPMM Code Injection Vulnerability
Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the Android File Transfer module allowing unauthenticated remote code...
- Security
Ivanti EPMM Zero-Days Breach Dutch, EU, and Finnish
Two critical Ivanti Endpoint Manager Mobile zero-days with CVSS 9.8 were exploited to breach the Dutch Data Protection Authority, European Commission, and...
- News
Ivanti Connect Secure Under Active Attack - CISA Issues
CISA has issued an emergency directive requiring federal agencies to mitigate Ivanti Connect Secure vulnerabilities within 48 hours as active exploitation...