Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

Last Modified: Oct 30, 2026

Published: Oct 15, 2026

CVE-2026-109412

Exposed Endpoint in Ivanti Neurons Patch for Intune Enables Leakage of Authentication Information

Last Modified: Oct 22, 2026

Published: Oct 13, 2026

CVE-2026-106047

Path Traversal in Ivanti Xtraction Allows Arbitrary File Read

Last Modified: Oct 13, 2026

Published: Oct 13, 2026

CVE-2026-106043

Remote Unauthenticated Modification of Trusted Site Entries in Ivanti Xtraction

Last Modified: Oct 13, 2026

Published: Oct 13, 2026

CVE-2026-106042

External Control of File Name or Path Allowing Credential Exposure in Ivanti Xtraction

Last Modified: Oct 14, 2026

Published: Oct 13, 2026

Items Per Page