Veille CVE

Recherche « Ivanti Connect Secure »

4 CVE

Critique 1 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ivanti Connect Secure » ✕
  1. CVE-2026-111357 7.0 Élevée

    Ivanti Connect Secure

    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

  2. CVE-2026-104935 8.6 Élevée Exploitée

    Ivanti Connect Secure

    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

  3. CVE-2025-22457 9.8 Critique Exploitée Rançongiciel

    Ivanti Connect Secure · Ivanti Policy Secure · Ivanti Neurons for ZTA gateways · Ivanti zero trust access gateway

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

  4. CVE-2020-8218 7.2 Élevée Exploitée

    Pulse Connect Secure · Ivanti connect secure · Ivanti policy secure · Pulsesecure pulse policy secure

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.