Known Vulnerabilities for products from Ivanti
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Ivanti".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111357 json | Not Provided | 2026-10-15 | 2026-10-16 | |
| CVE-2026-109412 json | Not Provided | 2026-10-13 | 2026-10-14 | |
| CVE-2026-106047 json | Not Provided | 2026-10-13 | 2026-10-13 | |
| CVE-2026-106043 json | Not Provided | 2026-10-13 | 2026-10-13 | |
| CVE-2026-106042 json | Not Provided | 2026-10-13 | 2026-10-14 | |
| CVE-2026-106035 json | Not Provided | 2026-10-13 | 2026-10-13 | |
| CVE-2026-106034 json | Not Provided | 2026-10-13 | 2026-10-13 | |
| CVE-2026-104935 json | Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrar... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-18851 json | Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote au... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-18129 json | Not Provided | 2026-08-11 | 2026-08-12 | |
| CVE-2026-18127 json | Not Provided | 2026-08-11 | 2026-08-11 | |
| CVE-2026-14903 json | Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary f... | Not Provided | 2026-07-14 | 2026-08-06 |
| CVE-2026-14902 json | An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users... | Not Provided | 2026-07-14 | 2026-08-06 |
| CVE-2026-12745 json | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated at... | Not Provided | 2026-09-08 | 2026-09-18 |
| CVE-2026-12744 json | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated at... | Not Provided | 2026-09-08 | 2026-09-18 |
| CVE-2026-12651 json | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated atta... | Not Provided | 2026-09-08 | 2026-09-18 |
| CVE-2026-12650 json | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated atta... | Not Provided | 2026-09-08 | 2026-09-18 |
| CVE-2026-12648 json | A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated atta... | Not Provided | 2026-09-08 | 2026-09-18 |
| CVE-2026-12647 json | A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to exec... | Not Provided | 2026-09-08 | 2026-09-18 |
| CVE-2026-12646 json | A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to exec... | Not Provided | 2026-09-08 | 2026-09-18 |
Known software with vulnerabilities from Ivanti
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Ivanti | Avalanche | 4.6 |
| Application | Ivanti | Desktopampserver Management | 2019.1 |
| Application | Ivanti | Dsm Netinst | 5.1 |
| Application | Ivanti | Endpoint Manager | 2016.4 |
| Application | Ivanti | Landesk Management Suite | 10.0.1.168 |
| Application | Ivanti | Service Manager Heat Remote Control | 7.4 |
| Application | Ivanti | Workspace Control | 10.1.0.0 |