Ivanti

www.ivanti.com ↗ Bug Bounty ↗ ⚠ 22 CISA KEV
D
RISKY
319
Total CVEs
235
Crit / High
66
Medium
53%
Unpatched
0%
Patched
7.7
Avg CVSS
22
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
53%
Under Review
47%
Pending
1%
✓ 0 patched ✗ 197 unpatched ~ 174 under review ⏳ 2 pending score
▸ Intelligence by Audience
PoC Available
8 / 20 shown
CISA KEV (Exploited)
22
Shodan Dorks
ssl:"ivanti" port:443
org:"Ivanti" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-10520 99.91% exploitation probability
CVE-2026-12744 2.17% exploitation probability
CVE-2026-12745 2.09% exploitation probability
CVE-2026-12651 1.49% exploitation probability
CVE-2026-12648 1.49% exploitation probability
🎯 Bug Bounty Program: https://www.ivanti.com/company/legal/bug-bounty
Quick Facts for Reporting
Total CVEs tracked
319
Critical severity
59
Actively exploited (CISA)
22
Unpatched ratio
53%
Avg CVSS score
7.7
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
MED
Vuln Volume
AVG
Patch Responsiveness
HIGH
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Ivanti Connect Secure 0-Day Vulnerability Actively Exploited in the Wild - CyberSecurityNews
CyberSecurityNews 7h ago
CISA adds second critical flaw in Ivanti EPMM to exploited vulnerabilities catalog - Cybersecurity Dive
Cybersecurity Dive 2026-04-09
Max-Severity Ivanti Flaw Exploited 24 Hours After Disclosure - Dark Reading
Dark Reading 2026-06-16
Ivanti's Chris Goettl: Preparing for the AI Patch Apocalypse - Cyber Magazine
Cyber Magazine 2026-05-31
CISA gives feds three days to patch Ivanti flaw exploited as zero-day - BleepingComputer
BleepingComputer 2026-05-08
CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited - The Hacker News
The Hacker News 2026-03-10
▸ Recent CVEs showing 20 of 373
CVE IDSeverityPatchEPSSDate
CVE-2026-106043 7.5 HIGH UNKNOWN / UNPATCHED — 2026-10-13
CVE-2026-106047 7.7 HIGH UNKNOWN / UNPATCHED — 2026-10-13
CVE-2026-109412 9.9 CRITICAL UNKNOWN / UNPATCHED — 2026-10-13
CVE-2026-106042 9.9 CRITICAL UNKNOWN / UNPATCHED — 2026-10-13
CVE-2026-12651 PoC 8.8 HIGH PATCH UNDER REVIEW 1.49% 2026-09-08
CVE-2026-12648 PoC 8.8 HIGH PATCH UNDER REVIEW 1.49% 2026-09-08
CVE-2026-18851 8.8 HIGH PATCH UNDER REVIEW 1.02% 2026-09-08
CVE-2026-12744 9.8 CRITICAL PATCH UNDER REVIEW 2.17% 2026-09-08
CVE-2026-12646 PoC 9.9 CRITICAL PATCH UNDER REVIEW 1.19% 2026-09-08
CVE-2026-12745 PoC 9.8 CRITICAL PATCH UNDER REVIEW 2.09% 2026-09-08
CVE-2026-12647 PoC 9.9 CRITICAL PATCH UNDER REVIEW 1.19% 2026-09-08
CVE-2026-12645 PoC 9.9 CRITICAL PATCH UNDER REVIEW 1.23% 2026-09-08
CVE-2026-12650 9.9 CRITICAL PATCH UNDER REVIEW 1.49% 2026-09-08
CVE-2026-18125 PoC 7.5 HIGH UNKNOWN / UNPATCHED 0.78% 2026-08-11
CVE-2026-18129 8.1 HIGH UNKNOWN / UNPATCHED 0.87% 2026-08-11
CVE-2026-18127 7.7 HIGH UNKNOWN / UNPATCHED 0.39% 2026-08-11
CVE-2026-14903 7.7 HIGH PATCH UNDER REVIEW 1.18% 2026-07-14
CVE-2026-14902 4.0 MEDIUM UNKNOWN / UNPATCHED 0.43% 2026-07-14
CVE-2026-10520 KEV PoC 10.0 CRITICAL PATCH UNDER REVIEW 99.91% 2026-06-09
CVE-2026-8992 8.8 HIGH UNKNOWN / UNPATCHED 0.56% 2026-05-22
View all 373 CVEs for Ivanti →
▸Intel
HQSouth Jordan, Utah, United States
Founded1985
Employees5,000
CEOJeff Abbott
Bug BountyView Program ↗
Trust ScoreD — RISKY
Max CVSS10.0
Last Updated2026-08-03
▸Top Weaknesses
CWE-89
SQL Injection
57 occurrences in Ivanti CVEs (18% of total)
CWE-89 ⓘ
57
CWE-22
Unknown Weakness Type
32 occurrences in Ivanti CVEs (10% of total)
CWE-22 ⓘ
32
CWE-276
Incorrect Default Permissions
15 occurrences in Ivanti CVEs (5% of total)
CWE-276 ⓘ
15
CWE-125
Out-of-Bounds Read
12 occurrences in Ivanti CVEs (4% of total)
CWE-125 ⓘ
12
CWE-78
Unknown Weakness Type
11 occurrences in Ivanti CVEs (3% of total)
CWE-78 ⓘ
11
CWE-20
Unknown Weakness Type
8 occurrences in Ivanti CVEs (3% of total)
CWE-20 ⓘ
8
CWE-476
NULL Pointer Dereference
8 occurrences in Ivanti CVEs (3% of total)
CWE-476 ⓘ
8
CWE-79
Cross-Site Scripting (XSS)
7 occurrences in Ivanti CVEs (2% of total)
CWE-79 ⓘ
7
▸Company Profile

Ivanti is a software company that specializes in IT asset management, endpoint management, and security solutions, including patch management and vulnerability detection. Its products are widely used by enterprises to manage and secure their IT infrastructure, making it a significant vendor in the cybersecurity landscape. Ivanti has been associated with multiple high-severity vulnerabilities, notably in its Connect Secure and Policy Secure products, which have been exploited in targeted attacks.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -69% better
CVE count 2026 vs 2025:  110 → 34 CVEs
Patch Speed ⓘ Poor (>65% open)
53% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€2.0M
Est. GDPR High
€20.0M

Based on 59 critical CVEs, 22 CISA KEV, 95% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Ivanti D valtersit.com