CVE-2024-8190: Ivanti CSA Vulnerability
A zero-day vulnerability in Ivanti CSA appliances exploited by QTFY for initial access.
Tag: Ivanti
CVE-2024-8963: Ivanti CSA Vulnerability
A zero-day vulnerability in Ivanti CSA appliances used by QTFY in attacks.
CVE-2024-9380: Ivanti CSA Vulnerability
A zero-day vulnerability in Ivanti CSA appliances exploited by QTFY.
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Ivanti, Fortinet, and SAP have released security patches addressing multiple critical vulnerabilities that could lead to arbitrary code execution and information disclosure.Fortinet…
CVE-2026-10523: Ivanti Sentry Authentication Bypass Vulnerability
An authentication bypass vulnerability in Ivanti Sentry before versions R10.5.2, R10.6.2, and R10.7.1 allows remote unauthenticated attackers to create arbitrary administrative accounts…
Ivanti: IT Asset Management and Security Solutions
Ivanti provides IT asset management, endpoint management, and security solutions, including Ivanti Sentry (formerly MobileIron Sentry).
Ivanti Sentry Mobile Device Management
Ivanti Sentry is a mobile device management product, associated with CVE-2026-10520 used as a lure in the ChocoPoC campaign.
CVE-2026-10520 — Ivanti Sentry OS Command Injection Vulnerability
Ivanti Sentry OS Command Injection Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…
CVE-2026-6973 — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services,…