Loading story…
Ivanti released security updates for eight vulnerabilities across Cloud Services Application (CSA), Connect Secure (ICS), Policy Secure (IPS), Desktop and Server Management (DSM), Sentry, and Patch SDK, including five rated critical. The most severe issues affect CSA, ICS, and IPS and could allow SQL injection, remote code execution, authentication bypass, and ultimately full system compromise, while a separate advisory also addressed CVE-2024-7572 in DSM.
Additional flaws can lead to denial of service, unauthorized system changes, file deletion, and bypass of security mechanisms. Ivanti said Patch SDK exposure also affects dependent products including Endpoint Manager, Security Controls, Patch for Configuration Manager, Neurons for Patch Management, and Neurons Agent Platform, and urged customers to upgrade immediately to supported fixed versions for ICS, IPS, DSM, and other impacted platforms.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
Ivanti released security updates addressing eight vulnerabilities across CSA, DSM, ICS, IPS, Sentry, and Patch SDK, including five rated critical. CSIRT.SK reported that the most severe flaws could enable SQL injection, remote code execution, authentication bypass, full system compromise, denial of service, unauthorized changes, file deletion, and security mechanism bypass, and urged immediate upgrades to fixed versions.
Ivanti published a December 2024 security advisory for Ivanti Connect Secure and Ivanti Policy Secure covering multiple vulnerabilities. The advisory disclosed the affected products and fixes for the issues.
Ivanti published a security advisory for Ivanti Desktop and Server Management covering CVE-2024-7572. The advisory disclosed the vulnerability and associated remediation guidance.
3 references tracked. Mallory keeps watching after this page renders.
csirt.sk
Open sourceforums.ivanti.com
Open sourceforums.ivanti.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ivanti released security updates for **Ivanti Connect Secure**, **Policy Secure**, **ZTA Gateway**, and **Neurons for Secure Access** to fix four vulnerabilities, including two high-severity remote unauthenticated denial-of-service flaws tracked as `CVE-2025-5456` and `CVE-2025-5462`. The bugs stem from memory-safety weaknesses including a buffer over-read and a heap-based buffer overflow that can be triggered through crafted network input, potentially crashing appliances that provide VPN, zero-trust, and access-control services. Ivanti said cloud instances of Neurons for Secure Access were remediated by **August 2, 2025**, while on-premises customers must apply the fixed releases. The same advisory also addressed `CVE-2025-5466`, an authenticated administrator **XXE** issue that can cause denial of service, and `CVE-2025-5468`, a symbolic link handling flaw that could let a local authenticated attacker read arbitrary files. Ivanti said it had no evidence of customer exploitation before disclosure and that the issues were found through internal assessments and responsible disclosure, but the breadth of affected products increases operational risk for enterprises relying on Ivanti remote access infrastructure. The company also noted that **Pulse Connect Secure 9.x** no longer receives backported fixes because it has reached end of support.
Jun 29, 2026
Ivanti issued security updates for multiple enterprise products, including **Ivanti Connect Secure**, **Policy Secure**, and **Ivanti Neurons for ITSM**, as the company continued remediation across its remote access and IT service management portfolio. The Neurons for ITSM fixes arrived in version **2025.4** and addressed **CVE-2026-4913** and **CVE-2026-4914**, affecting version **2025.3** and earlier in both on-premises and cloud deployments; Ivanti said cloud instances had already been patched and urged on-premises customers to upgrade through the Ivanti License System. According to Ivanti, **CVE-2026-4913** is an improper path protection flaw that could allow a remote authenticated attacker to retain access after an administrator disables the account, while **CVE-2026-4914** is a stored **XSS** issue that could let an authenticated attacker access limited data from other users’ sessions. Ivanti said it was not aware of active exploitation and had no indicators of compromise for the Neurons flaws, while its separate advisory for Connect Secure and Policy Secure signaled additional security remediation affecting those products.
Jun 29, 2026
Ivanti released security updates for multiple products, including **Endpoint Manager (EPM)**, **Xtraction**, **Virtual Traffic Manager (vTM)**, and **Secure Access Client for Windows**, prompting government cyber agencies in Canada and Belgium to urge immediate patching. The advisories cover several vulnerabilities, including `CVE-2026-8043` in Xtraction, `CVE-2026-8051` in vTM, `CVE-2026-7431` and `CVE-2026-7432` in Secure Access Client, and multiple issues in EPM. Reported impacts across the product set include local privilege escalation, sensitive data exposure, path traversal with arbitrary file write, OS command injection, credential leakage, and SQL injection that could lead to remote code execution.
Jun 29, 2026