Network Security
Six critical vulnerabilities in Neurons for ITSM could enable remote code execution, while Sentry and EPMM received patches for authentication bypass flaws.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Ivanti"
Vulnerabilities
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
Vulnerabilities
A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code.
Vulnerabilities
The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges.
Vulnerabilities
Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution.
Vulnerabilities
Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure.
Vulnerabilities
CVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code.
Vulnerabilities
The flaws could allow a remote attacker to maintain access after their account has been disabled and to access information from other user sessions.
Vulnerabilities
The bugs could lead to arbitrary code execution, privilege escalation, or authentication rate-limit bypass.
Malware & Threats
Security researchers have seen the vulnerabilities being exploited to deliver shells, conduct reconnaissance, and download malware.
Vulnerabilities
It also fixed a high-severity authentication bypass that could be exploited remotely without authentication to obtain credentials.
Vulnerabilities
The critical-severity vulnerabilities could allow unauthenticated attackers to execute arbitrary code remotely.
Vulnerabilities
The XSS vulnerability could allow remote attackers to execute arbitrary JavaScript code with administrator privileges.
Vulnerabilities
Ivanti and Zoom resolved security defects that could lead to arbitrary file writes, elevation of privilege, code execution, and information disclosure.
Vulnerabilities
Fortinet and Ivanti have announced their October 2025 Patch Tuesday updates, which patch many vulnerabilities across their products.
Vulnerabilities
The unpatched vulnerabilities allow attackers to execute arbitrary code remotely and escalate their privileges.
Malware & Threats
Hackers chained two Ivanti EPMM vulnerabilities to collect system information, dump credentials, and execute malware.
Vulnerabilities
High-severity vulnerabilities could lead to remote code execution, privilege escalation, information disclosure, and configuration tampering.
Vulnerabilities
Fortinet and Ivanti have published new security advisories for their August 2025 Patch Tuesday updates.
Vulnerabilities
Ivanti, Fortinet, and Splunk have released patches for critical- and high-severity vulnerabilities in their products.
Artificial Intelligence
As researchers warn that misaligned AI could threaten human survival, even beneficial systems may erode the critical thinking that defines our humanity.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Data Breaches
Artificial Intelligence
Data Breaches
Artificial Intelligence
Data Breaches
