https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:52:13.179611+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0768 certfr-2025-avi-0768 — De multiples vulnérabilités ont été découvertes dans les produits Ivanti. Elles permettent à un attaquant de provoquer… 2026-10-02T23:52:13.182808+00:00 certfr-2025-avi-0768 https://cve.radiocsirt.org/vuln/euvd-2026-272252 EUVD-2026-272252 2026-10-02T23:52:13.182843+00:00 EUVD-2026-272252 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55147 fkie_cve-2025-55147 2026-10-02T23:52:13.182858+00:00

CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to execute sensitive actions on behalf of the victim user. User interaction is required

 https://cve.radiocsirt.org/vuln/ghsa-56v7-g448-vffv GHSA-56v7-g448-vffv 2026-10-02T23:52:13.182886+00:00

CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to execute sensitive actions on behalf of the victim user. User interaction is required

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2010 WID-SEC-W-2025-2010 — Ivanti Connect Secure und Policy Secure: Mehrere Schwachstellen 2026-10-02T23:52:13.182902+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann diese Schwachstellen in Ivanti Connect Secure und Ivanti Policy Secure ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen und Cross-Site-Scripting-Angriffe durchzuführen.