Skip to content
Threat Feed

Vendor

Ivanti

5 briefs RSS
high threat

ESET APT Activity Report Q4 2025–Q1 2026 Highlights Various Threat Actor Campaigns

ESET's APT Activity Report for Q4 2025 and Q1 2026 highlights diverse campaigns by China, Iran, North Korea, and Russia-aligned threat actors, including espionage, supply chain compromise, and destructive attacks.

Ivanti VPN appliances +2 Lazarus Group +4 apt espionage supply-chain wiper
2r 3t
medium advisory

Ivanti Secure Access Client: Local Privilege Escalation Vulnerabilities

A local attacker can exploit vulnerabilities in Ivanti Secure Access Client to manipulate files or escalate privileges, potentially gaining elevated access to the system.

Secure Access Client privilege-escalation ivanti windows linux macos
2r 1t
medium advisory

Ivanti Addresses Multiple Vulnerabilities in Various Products

Ivanti released security advisories on May 12, 2026, to address vulnerabilities in Xtraction, Endpoint Manager (EPM), Virtual Traffic Manager (vTM), and Secure Access Client (Windows), urging users to apply necessary updates to mitigate potential risks from CVE-2026-8043, CVE-2026-8051, CVE-2026-7431, and CVE-2026-7432.

Xtraction +3 ivanti vulnerability patch cve
2r 4c
critical advisory

Multiple Vulnerabilities in Ivanti Endpoint Manager Mobile

Multiple vulnerabilities in Ivanti Endpoint Manager Mobile allow an attacker to gain administrator privileges, execute arbitrary code with administrator privileges, bypass security measures, manipulate data, and disclose sensitive information.

Endpoint Manager Mobile vulnerability privilege-escalation execution
2r 4t
critical threat

Ivanti EPMM Authenticated Remote Code Execution Vulnerability Exploited

CVE-2026-6973, an authenticated remote code execution vulnerability in Ivanti Endpoint Manager Mobile (EPMM), is being actively exploited, potentially leading to data breaches and system compromise.

exploited Endpoint Manager Mobile ivanti eppm rce vulnerability exploitation
2r 4t 1c