Ivanti

Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote API Access (CVE-2023-35078) new KEV RW EPSS 100%CVE-2023-35078networkCRITICAL 9.8Unverified2026-08-09Ivanti Connect Secure / Policy Secure / ZTA Gateways Remote Unauthenticated Stack-Based Buffer Overflow (CVE-2025-22457) new KEV RW EPSS 100%CVE-2025-22457networkCRITICAL 9Unpatched2026-08-09Ivanti EPMM Pre-Auth RCE via Bash Arithmetic Expansion (CVE-2026-1281 / CVE-2026-1340) new KEV EPSS 82%CVE-2026-1281, CVE-2026-1340networkCRITICALPatched2026-07-05Ivanti Sentry Pre-Auth RCE + Auth Bypass (CVE-2026-10520 / CVE-2026-10523) new KEV EPSS 100%CVE-2026-10520, CVE-2026-10523networkCRITICAL 10Patched2026-06-28Ivanti Connect Secure Pre-Auth RCE (Stack Overflow) new KEV RW EPSS 100%CVE-2025-0282networkCRITICAL 9Unverified2026-05-17