BaselineWatch
58136 CVEs · 127 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known58,136 New, 24 h1,488 Changed, 24 h2,460 In KEV127 Public exploit1,566 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-104935KEVexploit ×6 8.6 high 87.0% ivanti, connect_secure Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior. 13 Oct
CVE-2026-6973KEV 7.2 high 34.0% ivanti, endpoint_manager_mobile An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution. Mon 26 Oct
CVE-2025-10242 7.2 high 20.0% ivanti, endpoint_manager_mobile OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution. 8 Oct
CVE-2025-10243 7.2 high 20.0% ivanti, endpoint_manager_mobile OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution. 8 Oct
CVE-2025-10985 7.2 high 20.0% ivanti, endpoint_manager_mobile OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution. 8 Oct
CVE-2025-9713 8.8 high 15.0% ivanti, endpoint_manager Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required. 8 Oct
CVE-2026-5786 8.8 high 11.0% ivanti, endpoint_manager_mobile An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access. Mon 26 Oct
CVE-2026-8111 8.8 high 6.0% ivanti, endpoint_manager SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution. Mon 26 Oct
CVE-2026-18125 7.5 high 2.0% no CPE yet An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service. Fri 23 Oct
CVE-2026-8051 7.2 high 2.0% ivanti, virtual_traffic_manager OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution. Mon 26 Oct
CVE-2025-62387 6.5 medium 2.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2025-62389 6.5 medium 2.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2025-62390 6.5 medium 2.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2026-109412 9.9 critical 1.0% no CPE yet An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information. 14 Oct
CVE-2026-106042 9.9 critical 1.0% no CPE yet An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application. 14 Oct
CVE-2026-5788 9.8 critical 1.0% ivanti, endpoint_manager_mobile An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods. Mon 26 Oct
CVE-2026-8043 9.6 critical 1.0% ivanti, xtraction External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web directory, leading to information disclosure and possible client-side attacks. Mon 26 Oct
CVE-2026-7821 9.1 critical 1.0% ivanti, endpoint_manager_mobile Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to enroll a device belonging to a restricted set of unenrolled devices, leading to information disclosure about EPMM appliance and impacting on the integrity of the newly enrolled device identity. Mon 26 Oct
CVE-2026-5787 9.1 critical 1.0% ivanti, endpoint_manager_mobile An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates. Mon 26 Oct
CVE-2025-55145 8.9 high 1.0% ivanti, neurons_for_secure_access, connect_secure, policy_secure Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker to hijack existing HTML5 connections. 18 Oct
CVE-2025-55141 8.8 high 1.0% ivanti, connect_secure, policy_secure, zero_trust_access_gateway Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure authentication related settings. 18 Oct
CVE-2025-55142 8.8 high 1.0% ivanti, connect_secure, policy_secure, zero_trust_access_gateway Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure authentication related settings. 18 Oct
CVE-2025-55147 8.8 high 1.0% ivanti, connect_secure, policy_secure, zero_trust_access_gateway CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to execute sensitive actions on behalf of the victim user. User interaction is required 18 Oct
CVE-2026-18129 8.1 high 1.0% no CPE yet Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker in a MITM position to leak credentials for external SQL connections. Fri 23 Oct
CVE-2025-11622 7.8 high 1.0% ivanti, endpoint_manager Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to escalate their privileges. 8 Oct
CVE-2026-18127 7.7 high 1.0% no CPE yet External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an S3 bucket configured for session recording storage. Fri 23 Oct
CVE-2026-106047 7.7 high 1.0% no CPE yet A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files. 14 Oct
CVE-2025-55148 7.6 high 1.0% ivanti, connect_secure, policy_secure, zero_trust_access_gateway Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings. 18 Oct
CVE-2026-106043 7.5 high 1.0% no CPE yet A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site. 14 Oct
CVE-2025-55139 6.8 medium 1.0% ivanti, connect_secure, policy_secure, zero_trust_access_gateway SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to enumerate internal services. 18 Oct
CVE-2026-8109 6.5 medium 1.0% ivanti, endpoint_manager An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials. Mon 26 Oct
CVE-2026-14903 6.5 medium 1.0% ivanti, xtraction Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root. Sat 24 Oct
CVE-2025-11623 6.5 medium 1.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2025-62383 6.5 medium 1.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2025-62384 6.5 medium 1.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2025-62385 6.5 medium 1.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2025-62386 6.5 medium 1.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2025-62388 6.5 medium 1.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2025-62391 6.5 medium 1.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2025-62392 6.5 medium 1.0% ivanti, endpoint_manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database. 8 Oct
CVE-2026-14902 6.1 medium 1.0% ivanti, xtraction An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs. Sat 24 Oct
CVE-2025-55143 6.1 medium 1.0% ivanti, connect_secure, policy_secure, zero_trust_access_gateway Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to inject arbitrary text into a crafted HTTP response. User interaction is required. 18 Oct
CVE-2026-4913 5.7 medium 1.0% no CPE yet Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled. Mon 26 Oct
CVE-2025-10986 5.5 medium 1.0% ivanti, endpoint_manager_mobile Path traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to write data in unintended locations on disk. 8 Oct
CVE-2025-55144 5.4 medium 1.0% ivanti, connect_secure, policy_secure, zero_trust_access_gateway Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings. 18 Oct
CVE-2025-55146 4.9 medium 1.0% ivanti, connect_secure, policy_secure, zero_trust_access_gateway An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to trigger a denial of service. 18 Oct
CVE-2026-8110 7.8 high 0.00% ivanti, endpoint_manager Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges. Mon 26 Oct
CVE-2025-10918 7.1 high 0.00% ivanti, endpoint_manager Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk 18 Oct
CVE-2026-111357 7.0 high 0.00% no CPE yet Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026. 11 h ago
CVE-2026-7432 7.0 high 0.00% ivanti, secure_access_client A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM Mon 26 Oct

50 of 56 · Next

Download these 56 as CSV · subscribe to this list.

EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.