https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:06:46.410464+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-10719 bdu:2024-10719 2026-10-02T19:06:46.416367+00:00 bdu:2024-10719 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0967 certfr-2024-avi-0967 — De multiples vulnérabilités ont été découvertes dans les produits Ivanti. Certaines d'entre elles permettent à un attaq… 2026-10-02T19:06:46.416400+00:00 certfr-2024-avi-0967 https://cve.radiocsirt.org/vuln/euvd-2026-205246 EUVD-2026-205246 2026-10-02T19:06:46.416435+00:00 EUVD-2026-205246 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38656 fkie_cve-2024-38656 2026-10-02T19:06:46.416447+00:00

Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-gvvw-6jh9-63h5 GHSA-gvvw-6jh9-63h5 2026-10-02T19:06:46.416474+00:00

Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

 https://cve.radiocsirt.org/vuln/va-24-317-01 VA-24-317-01 — Ivanti Connect Secure and Ivanti Policy Secure Multiple Vulnerabilities 2026-10-02T19:06:46.416490+00:00

Ivanti Connect Secure before versions 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allow a remote, authenticated attacker with administrative privileges to inject operating system commands using the 'dig' web interface. Ivanti Connect Secure before versions 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allow a remote, authenticated attacker with administrative privileges to inject operating system commands using the 'ping6' web interface. Ivanti Connect Secure before versions 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allow a remote, authenticated attacker with administrative privileges to inject operating system commands using the 'traceroute6' web interface. Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allow allow a remote, authenticated attacker with administrative privileges to write arbitrary files or execute operating system commands with the operating system privileges of the 'nr' user using the diagnostic web interface for the Port Probe ('nmap') feature. Ivanti Connect Secure before version 22.6R2 and Ivanti Policy Secure before version 22.7R1 allow a local, authenticated attacker with 'nr' operating system privileges to gain 'root' privileges by overwriting the 'kwatchdog' configuration file. Ivanti Connect Secure before versions 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allow a remote, authenticated attacker…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3433 WID-SEC-W-2024-3433 — Ivanti Connect Secure: Mehrere Schwachstellen 2026-10-02T19:06:46.416526+00:00

Ein Angreifer kann mehrere Schwachstellen in Ivanti Connect Secure, Ivanti Policy Secure und Ivanti Secure Access Client ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service Zustand zu erzeugen und Daten zu modifizieren