CISA KEV by vendor
Ivanti vulnerabilities in the CISA KEV catalogue
38 Ivanti entries in CISA's Known Exploited Vulnerabilities catalogue, 12 of them (32 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 30 October 2026.
Data status: a source is stale
Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually
38entries, 2.1% of the catalogue
12known ransomware use
2added in the last 7 days
1federal due date in the next 14 days
Products
| Product, as CISA names it | Entries |
|---|---|
| Endpoint Manager Mobile (EPMM) | 7 |
| Pulse Connect Secure | 7 |
| Endpoint Manager (EPM) | 5 |
| Connect Secure | 3 |
| Cloud Services Appliance (CSA) | 3 |
| Sentry | 2 |
| Connect Secure, Policy Secure, and ZTA Gateways | 2 |
| Connect Secure and Policy Secure | 2 |
| Virtual Traffic Manager | 1 |
| Cloud Services Appliance | 1 |
| Endpoint Manager Cloud Service Appliance (EPM CSA) | 1 |
| Connect Secure, Policy Secure, and Neurons | 1 |
| Endpoint Manager Mobile (EPMM) and MobileIron Core | 1 |
| MobileIron Multiple Products | 1 |
| Pulse Connect Secure and Pulse Policy Secure | 1 |
Latest additions
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-118527 new | Connect Secure | 2026-10-30 | 2026-11-13 due soon | Unknown | 4.3 Medium | 0.8% | Not auto, partial | 14 days |
| CVE-2026-111357 new | Connect Secure | 2026-10-30 | 2026-11-02 passed | Unknown | 7.0 High | 0.5% | Not auto, total | 3 days + triage |
| CVE-2026-104935 | Connect Secure | 2026-10-13 | 2026-10-16 passed | Unknown | 8.6 High | 88.9% | Auto, total | 3 days + triage |
| CVE-2026-10520 | Sentry | 2026-06-11 | 2026-06-14 | Unknown | 10.0 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2026-6973 | Endpoint Manager Mobile (EPMM) | 2026-05-07 | 2026-05-10 | Unknown | 7.2 High | 34.4% | Not auto, total | 3 days + triage |
| CVE-2026-1340 | Endpoint Manager Mobile (EPMM) | 2026-04-08 | 2026-04-11 | Unknown | 9.8 Critical | 98.6% | Auto, total | 3 days + triage |
| CVE-2026-1603 | Endpoint Manager (EPM) | 2026-03-09 | 2026-03-23 | Unknown | 7.5 High | 88.3% | Auto, total | 3 days + triage |
| CVE-2026-1281 | Endpoint Manager Mobile (EPMM) | 2026-01-29 | 2026-02-01 | Unknown | 9.8 Critical | 98.6% | Auto, total | 3 days + triage |
| CVE-2025-4428 | Endpoint Manager Mobile (EPMM) | 2025-05-19 | 2025-06-09 | Unknown | 8.8 High | 88.0% | Auto, total | 3 days + triage |
| CVE-2025-4427 | Endpoint Manager Mobile (EPMM) | 2025-05-19 | 2025-06-09 | Unknown | 7.5 High | 99.9% | Auto, total | 3 days + triage |
All 38 entries
| CVE | Product | Added | Due | Ransomware | CVSS | EPSS | SSVC | Exposed asset window |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-118527 new | Connect Secure | 2026-10-30 | 2026-11-13 due soon | Unknown | 4.3 Medium | 0.8% | Not auto, partial | 14 days |
| CVE-2026-111357 new | Connect Secure | 2026-10-30 | 2026-11-02 passed | Unknown | 7.0 High | 0.5% | Not auto, total | 3 days + triage |
| CVE-2026-104935 | Connect Secure | 2026-10-13 | 2026-10-16 passed | Unknown | 8.6 High | 88.9% | Auto, total | 3 days + triage |
| CVE-2026-10520 | Sentry | 2026-06-11 | 2026-06-14 | Unknown | 10.0 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2026-6973 | Endpoint Manager Mobile (EPMM) | 2026-05-07 | 2026-05-10 | Unknown | 7.2 High | 34.4% | Not auto, total | 3 days + triage |
| CVE-2026-1340 | Endpoint Manager Mobile (EPMM) | 2026-04-08 | 2026-04-11 | Unknown | 9.8 Critical | 98.6% | Auto, total | 3 days + triage |
| CVE-2026-1603 | Endpoint Manager (EPM) | 2026-03-09 | 2026-03-23 | Unknown | 7.5 High | 88.3% | Auto, total | 3 days + triage |
| CVE-2026-1281 | Endpoint Manager Mobile (EPMM) | 2026-01-29 | 2026-02-01 | Unknown | 9.8 Critical | 98.6% | Auto, total | 3 days + triage |
| CVE-2025-4428 | Endpoint Manager Mobile (EPMM) | 2025-05-19 | 2025-06-09 | Unknown | 8.8 High | 88.0% | Auto, total | 3 days + triage |
| CVE-2025-4427 | Endpoint Manager Mobile (EPMM) | 2025-05-19 | 2025-06-09 | Unknown | 7.5 High | 99.9% | Auto, total | 3 days + triage |
| CVE-2025-22457 | Connect Secure, Policy Secure, and ZTA Gateways | 2025-04-04 | 2025-04-11 | Known | 9.8 Critical | 99.9% | Not auto, total | 3 days + triage |
| CVE-2024-13161 | Endpoint Manager (EPM) | 2025-03-10 | 2025-03-31 | Unknown | 7.5 High | 89.8% | Auto, total | 3 days + triage |
| CVE-2024-13160 | Endpoint Manager (EPM) | 2025-03-10 | 2025-03-31 | Unknown | 7.5 High | 90.9% | Auto, total | 3 days + triage |
| CVE-2024-13159 | Endpoint Manager (EPM) | 2025-03-10 | 2025-03-31 | Unknown | 7.5 High | 99.9% | Auto, total | 3 days + triage |
| CVE-2025-0282 | Connect Secure, Policy Secure, and ZTA Gateways | 2025-01-08 | 2025-01-15 | Known | 9.0 Critical | 99.9% | Not auto, total | 3 days + triage |
| CVE-2024-9380 | Cloud Services Appliance (CSA) | 2024-10-09 | 2024-10-30 | Unknown | 7.2 High | 58.3% | Not auto, total | 3 days + triage |
| CVE-2024-9379 | Cloud Services Appliance (CSA) | 2024-10-09 | 2024-10-30 | Unknown | 7.2 High | 44.2% | Not auto, total | 3 days + triage |
| CVE-2024-29824 | Endpoint Manager (EPM) | 2024-10-02 | 2024-10-23 | Unknown | 8.8 High | 99.9% | Auto, total | 3 days + triage |
| CVE-2024-7593 | Virtual Traffic Manager | 2024-09-24 | 2024-10-15 | Unknown | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2024-8963 | Cloud Services Appliance (CSA) | 2024-09-19 | 2024-10-10 | Unknown | 9.1 Critical | 98.6% | Auto, total | 3 days + triage |
| CVE-2024-8190 | Cloud Services Appliance | 2024-09-13 | 2024-10-04 | Unknown | 7.2 High | 88.5% | Not auto, total | 3 days + triage |
| CVE-2021-44529 | Endpoint Manager Cloud Service Appliance (EPM CSA) | 2024-03-25 | 2024-04-15 | Known | 9.8 Critical | 99.1% | Auto, total | 3 days + triage |
| CVE-2024-21893 | Connect Secure, Policy Secure, and Neurons | 2024-01-31 | 2024-02-02 | Known | 8.2 High | 99.9% | Auto, partial | 3 days |
| CVE-2023-35082 | Endpoint Manager Mobile (EPMM) and MobileIron Core | 2024-01-18 | 2024-02-08 | Known | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2024-21887 | Connect Secure and Policy Secure | 2024-01-10 | 2024-01-22 | Known | 9.1 Critical | 99.9% | Not auto, total | 3 days + triage |
| CVE-2023-46805 | Connect Secure and Policy Secure | 2024-01-10 | 2024-01-22 | Known | 8.2 High | 99.9% | Auto, partial | 3 days |
| CVE-2023-38035 | Sentry | 2023-08-22 | 2023-09-12 | Known | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2023-35081 | Endpoint Manager Mobile (EPMM) | 2023-07-31 | 2023-08-21 | Unknown | 7.2 High | 63.5% | Not auto, total | 3 days + triage |
| CVE-2023-35078 | Endpoint Manager Mobile (EPMM) | 2023-07-25 | 2023-08-15 | Known | 9.8 Critical | 99.9% | Auto, total | 3 days + triage |
| CVE-2021-22900 | Pulse Connect Secure | 2021-11-03 | 2022-05-03 | Unknown | 7.2 High | 14.1% | Not auto, total | 3 days + triage |
| CVE-2021-22899 | Pulse Connect Secure | 2021-11-03 | 2022-05-03 | Unknown | 8.8 High | 22.9% | Not auto, total | 3 days + triage |
| CVE-2021-22894 | Pulse Connect Secure | 2021-11-03 | 2022-05-03 | Unknown | 8.8 High | 41.2% | Not auto, total | 3 days + triage |
| CVE-2021-22893 | Pulse Connect Secure | 2021-11-03 | 2022-05-03 | Known | 10.0 Critical | 47.1% | Auto, total | 3 days + triage |
| CVE-2020-8260 | Pulse Connect Secure | 2021-11-03 | 2022-05-03 | Unknown | 7.2 High | 96.4% | Not auto, total | 3 days + triage |
| CVE-2020-8243 | Pulse Connect Secure | 2021-11-03 | 2022-05-03 | Unknown | 7.2 High | 90.7% | Not auto, total | 3 days + triage |
| CVE-2020-15505 | MobileIron Multiple Products | 2021-11-03 | 2022-05-03 | Unknown | 9.8 Critical | 99.7% | Auto, total | 3 days + triage |
| CVE-2019-11539 | Pulse Connect Secure and Pulse Policy Secure | 2021-11-03 | 2022-05-03 | Known | 7.2 High | 98.5% | Not auto, total | 3 days + triage |
| CVE-2019-11510 | Pulse Connect Secure | 2021-11-03 | 2022-05-03 | Known | 10.0 Critical | 99.9% | Auto, total | 3 days + triage |
Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Ivanti in the tracker by date, score or status.
Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.