Warning Against Vulnerabilities Exploited in Actual Attacks (Ivanti Connect Secure)
Overview The Cybersecurity and Infrastructure Security Agency (CISA) has released a list of vulnerabilities currently being exploited in attacks. The list includes two vulnerabilities related to Ivanti Connect Secure. Vulnerability CVE-2026-118527: A vulnerability involving the generation of predictable numbers or identifiers in Ivanti Connect Secure. CVE-2026-111357: A vulnerability involving a
Ivanti Product Security Update Advisory (CVE-2026-104935)
Ivanti has released a security update to address a vulnerability in Ivanti Connect Secure (ICS). The vulnerability, identified as CVE-2026-104935, is an authentication bypass vulnerability that is exploited through spoofing (impersonation). Affected Versions include Ivanti Connect Secure (ICS) 22.8R2.4 And earlier, 25.1.1.1 And earlier, and 25.1.2.2 And earlier. The latest
Ivanti Product Security Update Advisory (CVE-2025-22457)
Overview We have released a security update to fix vulnerabilities in Ivanti products. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-22457 Ivanti Connect Secure versions: 22.7R2.5 and earlierPulse Connect Secure (EoS) Version: 9.1R18.9 and earlierIvanti Policy Secure version: 22.7R1.3 or
Ivanti Product Security Update Advisory
Overview We have released a security update to fix vulnerabilities in Ivanti products. Users of...
Ivanti Product Security Update Advisory
Overview We have released a security update to fix vulnerabilities in Ivanti products. Users of...
Status of Korean Servers Exposed to Ivanti Connect Secure Vulnerabilities (Multiple CVEs)
Multiple vulnerabilities have been disclosed for the Ivanti Connect Secure product, including several with a CVSS score of 9 or higher (CRITICAL). The majority of Ivanti Connect Secure servers operating in Korea have been identified as vulnerable versions. Figure 1. Default connection screen of Ivanti Connect Secure Ivanti
