Skip to content

// #ivanti

5 articles

← All tags
🌐 Network

Ivanti Sentry CVE-2026-10523 (CVSS 9.9): Second Critical Flaw Chains with CVE-2026-10520 for Complete Device Takeover

Ivanti has disclosed a second critical vulnerability in Sentry — CVE-2026-10523, an authentication bypass scoring CVSS 9.9 — that chains with the previously patched CVE-2026-10520 (CVSS 10.0) to enable complete unauthenticated takeover of the MDM gateway. Organisations that deployed the initial patch must apply additional updates; the two CVEs affect overlapping but distinct code paths.

#ivanti +7
🛡️ SecOps

Ivanti Sentry CVE-2026-10520: CVSS 10.0 Pre-Authentication RCE Exploited After PoC Release

Ivanti has disclosed CVE-2026-10520, a CVSS 10.0 pre-authentication remote code execution vulnerability in Ivanti Sentry (formerly MobileIron Sentry) that is being actively exploited following public proof-of-concept release. A companion OS command injection flaw CVE-2026-10523 (CVSS 9.4) affects the same platform. Both require immediate action for all organisations running Ivanti Sentry in their mobile device management infrastructure.

#ivanti +9
🔑 IAM

Ivanti EPMM CVE-2026-6973 — Remote Code Execution Added to CISA KEV, Patch Required

Ivanti has disclosed CVE-2026-6973, a remote code execution vulnerability in Endpoint Manager Mobile (EPMM, formerly MobileIron) that has been added to the CISA Known Exploited Vulnerabilities catalogue following confirmed limited exploitation. EPMM is a mobile device management platform used by government agencies and enterprises. Organisations should apply the available patch and audit administrator account activity. EPMM has a prior history of critical exploitation including the 2023 Norwegian government attack.

#ivanti +9
🌐 Network

CISA Adds Ivanti EPMM CVE-2026-1340 to KEV — Federal Patch Deadline Today

CISA has added CVE-2026-1340, a critical unauthenticated remote code execution flaw in Ivanti Endpoint Manager Mobile, to the Known Exploited Vulnerabilities catalogue with a federal agency deadline of 11 April. The vulnerability chains with CVE-2026-1281 to enable full appliance takeover and has been actively exploited since January 2026. All organisations running Ivanti EPMM on-premises must patch immediately.

#ivanti +8
🌐 Network

Ivanti EPM Authentication Bypass CVE-2026-1603 Exploited — Federal Patch Deadline Today

CISA added CVE-2026-1603, an authentication bypass in Ivanti Endpoint Manager, to the Known Exploited Vulnerabilities catalogue on 9 March with a federal agency patch deadline of 23 March. The flaw allows unauthenticated attackers to bypass authentication entirely and steal Domain Administrator password hashes and service account credentials from EPM's credential vault.

#ivanti +6

Commentary tagged #ivanti

Opinion

When Microsoft, SAP, Ivanti, and Palo Alto All Patch Critical Flaws on the Same Day, We Have a Coordination Problem

The week of 9 June 2026 delivered critical security patches from at least four major vendors on the same day, plus a Linux kernel PoC, plus a CISA KEV batch. The security community has created a coordination structure — Patch Tuesday — that has the opposite of its intended effect: it concentrates defender workload in a single week every month while giving attackers 30 predictable days to prepare.

CipherWatch Editorial

Security Intelligence Platform