https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:17:37.790248+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-01598 bdu:2025-01598 2026-10-02T17:17:37.794696+00:00 bdu:2025-01598 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0121 certfr-2025-avi-0121 — De multiples vulnérabilités ont été découvertes dans les produits Ivanti. Certaines d'entre elles permettent à un attaq… 2026-10-02T17:17:37.794736+00:00 certfr-2025-avi-0121 https://cve.radiocsirt.org/vuln/euvd-2026-218547 EUVD-2026-218547 2026-10-02T17:17:37.794756+00:00 EUVD-2026-218547 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38657 fkie_cve-2024-38657 2026-10-02T17:17:37.794768+00:00

External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to write arbitrary files.

 https://cve.radiocsirt.org/vuln/ghsa-gj4j-xh74-gvw8 GHSA-gj4j-xh74-gvw8 2026-10-02T17:17:37.794793+00:00

External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to write arbitrary files.

 https://cve.radiocsirt.org/vuln/va-25-043-01 VA-25-043-01 — Ivanti Connect Secure and Ivanti Policy Secure external file control vulnerability 2026-10-02T17:17:37.794808+00:00

Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allow a remote attacker with administrative privileges in the web management interface to upload and write arbitrary files in the context of the underlying operating system.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3433 WID-SEC-W-2024-3433 — Ivanti Connect Secure: Mehrere Schwachstellen 2026-10-02T17:17:37.794826+00:00

Ein Angreifer kann mehrere Schwachstellen in Ivanti Connect Secure, Ivanti Policy Secure und Ivanti Secure Access Client ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service Zustand zu erzeugen und Daten zu modifizieren