I
Ivanti
Security Risk Profile
64
/100
highSecurity Risk Score
Comprehensive risk assessment based on 936 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 26, 2016 to present
936
Total CVEs
444
Critical+High
82
Exploited
428
Unpatched
Threat Assessment
Avg CVSS
8
Base severity
Avg EPSS
15%
Exploit probability
Unpatched
428
Critical/High
Risk Level
64/100
high
⚠️ 82 Active Exploits⚡ 53 Zero-Days🆕 35Fresh (<7d)📈 35 in Last 30 Days
Severity Distribution
Critical
158High
286Medium
105Low
1Exploit Likelihood
>50% chance
1220-50%
05-20%
7<5%
57Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
70
2
Path Traversal
51
3
Command Injection
30
4
XSS
24
5
Buffer Overflow
21
Most Affected Products
1. Ivanti Connect Secure2496
2. PulseSecure Pulse Connect Secure1129
3. Ivanti Endpoint Manager994
4. Ivanti Policy Secure843
5. PulseSecure Pulse Policy Secure608
Recent Vulnerabilities
See more →CVE-2026-111357
CVSS 7.0high
Oct 15, 2026🔧 No Patch
https://reddit.com/r/sysadmin/comments/1x5ly84/ivanti_connect_secure_zeroday_chain_cve2026104935/
unknown
Ivanti Connect Secure zero-day chain (CVE-2026-104935) got root on a fully patched 22.8R2.4 VPN from October 3, and Ivanti had fixed part of it on one branch in July
Oct 14, 2026🔧 No Patch
CVE-2026-109412
CVSS 9.9critical
Oct 13, 2026🔧 No Patch
CVE-2026-106047
CVSS 7.7high
Oct 13, 2026🔧 No Patch
CVE-2026-106043
CVSS 7.5high
Oct 13, 2026🔧 No Patch
CVE-2026-106042
CVSS 9.9critical
Oct 13, 2026🔧 No Patch
CVE-2026-106035
CVSS 5.5medium
Oct 13, 2026🔧 No Patch
CVE-2026-106034
CVSS 5.0medium
Oct 13, 2026🔧 No Patch
CVE-2026-104935
CVSS 8.6high
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Oct 13, 2026⚠ Exploited🔧 No Patch
CVE-2026-12647
CVSS 9.9critical
Sep 8, 2026🔧 No Patch
Monitor Ivanti in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.