Tag
Ivanti Xtraction Vulnerabilities CVE-2026-14902 and CVE-2026-14903
2 CVEsIvanti has published a security advisory (AV26-696) on July 14, 2026, to address two vulnerabilities, CVE-2026-14902 and CVE-2026-14903, affecting Ivanti Xtraction version 2026.2 and prior, urging users to apply necessary updates to mitigate potential risks.
Ivanti Secure Access Client: Local Privilege Escalation Vulnerabilities
2 rules 1 TTPA local attacker can exploit vulnerabilities in Ivanti Secure Access Client to manipulate files or escalate privileges, potentially gaining elevated access to the system.
Ivanti Addresses Multiple Vulnerabilities in Various Products
2 rules 4 CVEsIvanti released security advisories on May 12, 2026, to address vulnerabilities in Xtraction, Endpoint Manager (EPM), Virtual Traffic Manager (vTM), and Secure Access Client (Windows), urging users to apply necessary updates to mitigate potential risks from CVE-2026-8043, CVE-2026-8051, CVE-2026-7431, and CVE-2026-7432.
Ivanti EPMM Authenticated Remote Code Execution Vulnerability Exploited
2 rules 4 TTPs 1 CVECVE-2026-6973, an authenticated remote code execution vulnerability in Ivanti Endpoint Manager Mobile (EPMM), is being actively exploited, potentially leading to data breaches and system compromise.
Ivanti VTM Administrator Account Creation via CVE-2024-7593
2 rules 2 TTPs 1 CVEUnauthenticated remote attackers are exploiting CVE-2024-7593 in Ivanti Virtual Traffic Manager (vTM) to bypass authentication and create new administrator accounts, potentially leading to full system compromise.
Ivanti EPMM Unauthenticated API Access via CVE-2023-35078
2 rules 2 TTPsExploitation of CVE-2023-35078 in Ivanti EPMM allows unauthenticated remote API access, potentially leading to data theft, unauthorized modifications, or further system compromise.