Vulnerabilities
A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Ivanti"
Vulnerabilities
The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges.
Vulnerabilities
Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution.
Vulnerabilities
Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure.
Vulnerabilities
CVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code.
Vulnerabilities
The flaws could allow a remote attacker to maintain access after their account has been disabled and to access information from other user sessions.
Vulnerabilities
The bugs could lead to arbitrary code execution, privilege escalation, or authentication rate-limit bypass.
Malware & Threats
Security researchers have seen the vulnerabilities being exploited to deliver shells, conduct reconnaissance, and download malware.
Vulnerabilities
It also fixed a high-severity authentication bypass that could be exploited remotely without authentication to obtain credentials.
Vulnerabilities
The critical-severity vulnerabilities could allow unauthenticated attackers to execute arbitrary code remotely.
Vulnerabilities
The XSS vulnerability could allow remote attackers to execute arbitrary JavaScript code with administrator privileges.
Vulnerabilities
Ivanti and Zoom resolved security defects that could lead to arbitrary file writes, elevation of privilege, code execution, and information disclosure.
Vulnerabilities
Fortinet and Ivanti have announced their October 2025 Patch Tuesday updates, which patch many vulnerabilities across their products.
Vulnerabilities
The unpatched vulnerabilities allow attackers to execute arbitrary code remotely and escalate their privileges.
Malware & Threats
Hackers chained two Ivanti EPMM vulnerabilities to collect system information, dump credentials, and execute malware.
Vulnerabilities
High-severity vulnerabilities could lead to remote code execution, privilege escalation, information disclosure, and configuration tampering.
Vulnerabilities
Fortinet and Ivanti have published new security advisories for their August 2025 Patch Tuesday updates.
Vulnerabilities
Ivanti, Fortinet, and Splunk have released patches for critical- and high-severity vulnerabilities in their products.
Vulnerabilities
Patches released by Fortinet and Ivanti resolve over a dozen vulnerabilities, including high-severity flaws leading to code execution, credential leaks.
Malware & Threats
A Chinese espionage group has been chaining two recent Ivanti EPMM vulnerabilities in attacks against organizations in multiple critical sectors.
Vulnerabilities
The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.
Vulnerabilities
Artificial Intelligence
Endpoint Security
Artificial Intelligence
Artificial Intelligence
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and...
Cybersecurity Funding
Cybersecurity Funding
Cybersecurity Funding
Cybersecurity Funding
