Ivanti Connect Secure vulnerabilities
131 published vulnerabilities in Ivanti Connect Secure, 15 of them exploited in the wild. The most were published in 2024 (38), and 1 so far in 2026.
Ivanti Connect Secure vulnerabilities by year
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Ivanti Connect Secure vulnerabilities
- CVE-2021-22893 Ivanti Pulse Connect Secure Use-After-Free
- CVE-2019-11510 Ivanti Pulse Connect Secure Arbitrary File Read
- CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection
- CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow
- CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow
- CVE-2021-22894 Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow
- CVE-2021-22899 Ivanti Pulse Connect Secure Command Injection
- CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing
- CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF)
- CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass
- CVE-2019-11539 Ivanti Pulse Connect Secure and Policy Secure Command Injection
- CVE-2021-22900 Ivanti Pulse Connect Secure Unrestricted File Upload
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.