Spremljamo ranljivosti v izdelkih največjih proizvajalcev, kot so Microsoft, Cisco, Fortinet, Citrix in drugi. Izberite proizvajalca za seznam njegovih aktivnih ranljivosti in naših člankov.
Ivanti: ranljivosti v zadnjem letu
| CVE | CVSS | EPSS | CISA KEV | Proizvajalec | Opis (NVD, angleško) |
|---|---|---|---|---|---|
| CVE-2026-104935 | 8,6 Visoko | 86,8 % | Aktivno izkoriščana od 13. 10. 2026 | Ivanti | Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior. |
| CVE-2026-111357 | 7 Visoko | 0,5 % | Aktivno izkoriščana od 30. 10. 2026 | Ivanti | Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026. |
Naši članki: Ivanti
Napadalci verižili tri ničelne dni v Ivanti Connect Secure za root dostop
Varnostno podjetje Volexity je razkrilo, da je napadalec verižil tri prej neznane ranljivosti v VPN napravi Ivanti Connect Secure in tako brez prijave pridobil root dostop. Ivanti je…
Ivanti Vulnerabilities: Mitigation Strategies and Incident Response
The Centreon Centreon Web SQL Injection vulnerability, known as CVE-2024-55573, presents a significant threat to users of the Centreon application. Discovered in late December 2024, this...
Ivanti Vulnerabilities: CVE-2025-0282 and CVE-2025-0283 Summary and Protection Measures
The Centreon Web SQL Injection Vulnerability, identified as CVE-2024-53923, has posed a serious threat to its users since it was discovered in December 2024. Centreon, a...
Recent Cybersecurity Threats and Vulnerabilities Overview: Ivanti CVE-2025-0282 attack and BlackBerry Global Threat Report
The CVE-2025-24024 Matrix Mjolnir Unrestricted Command Execution Vulnerability has recently come to light as a critical security issue. This vulnerability allows attackers to execute arbitrary commands...
Ivanti’s Crucial Updates for CSA and Connect Secure Vulnerabilities
Ivanti Issues Critical Security Updates: Addressing Privilege Escalation and Code Execution Flaws Ivanti has recently announced important security updates that tackle multiple critical vulnerabilities within its...
Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration
Security Flaws in Ivanti Cloud Service Appliance Recent reports have highlighted alarming news about a suspected nation-state adversary actively weaponizing three significant security flaws in the...
Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited
New Security Flaws Found in Ivanti's Cloud Service Appliance Ivanti has reported three new security vulnerabilities affecting its Cloud Service Appliance (CSA). These zero-day flaws are...
Ivanti Endpoint Manager Flaw: Urgent Call to Action for Agencies to Patch Now
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently added a significant security flaw affecting Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog. This...
CISA Raises Alert on Critical Ivanti vTM Vulnerability and Active Exploitation Risks
## CISA Highlights Critical Ivanti vTM Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently identified a significant security flaw in Ivanti Virtual Traffic Manager...