PT-2026-70214

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions prior to 2024 SU7 Description An issue in the Core of the software allows a remote authenticated attacker to gain full write control over an S3 bucket used for session recording storage. This is caused by...

August 2026 Security Advisory Ivanti Neurons for MDM

August 2026 Security Advisory Ivanti Neurons for MDM Summary Ivanti has released updates for Ivanti Neurons for MDM which addresses one medium vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: Description | CVS...

Ivanti Endpoint Manager - Authentication Bypass Detection

Ivanti Endpoint Manager 2024 SU5 contains an authentication bypass caused by improper access control, letting remote unauthenticated attackers leak stored credential data, exploit requires no special privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Endpoint Manager 2024 SU5 contain...

Ivanti Xtraction - Detect

Detects Ivanti Xtraction, a reporting and dashboard platform used with Ivanti products. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Ivanti Xtraction, a reporting and dashboard platform used with Ivanti products.""" from kittysploit import from lib.protocols.http.httpclient import...

Ivanti Incapptic Connect Panel - Detect

Ivanti Incapptic Connect panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Incapptic Connect panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info...

Ivanti Connect Secure - Stack-based Buffer Overflow Detection

Ivanti Connect Secure 22.7R2.5, Ivanti Policy Secure 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2.3 contain a stack-based buffer overflow in the clientCapabilities parameter handling. This vulnerability allows remote unauthenticated attackers to execute arbitrary code through IF-T TLS...

Ivanti(R) Cloud Services Appliance - Panel Detection

An Ivanti Cloud Services Appliance panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Ivanti Cloud Services Appliance panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'IvantiR Cloud...

Ivanti Sentry Panel - Detect

Ivanti Sentry panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Sentry panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ivanti Sentry Panel - Detect', 'description': 'Ivanti...

Ivanti Traffic Manager Panel - Detect

An Ivanti Traffic Manager Login Panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Ivanti Traffic Manager Login Panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ivanti Traffic...

Ivanti Connect Secure Panel - Detect

Ivanti Connect Secure provides a seamless, cost-effective SSL VPN solution for remote and mobile users from any web-enabled device to corporate resources— anytime, anywhere. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Connect Secure provides a seamless, cost-effective SSL VPN solution for...

Ivanti Endpoint Manager (EPM) - Detect

An Ivanti Endpoint Manager was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An Ivanti Endpoint Manager was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.osint.faviconhash import shodanmmh3 class ModuleScanner, Httpclient: info = 'name...

Ivanti Avalanche 6.3.2 - Local File Inclusion Detection

Ivanti Avalanche 6.3.2 is vulnerable to local file inclusion because it allows remote unauthenticated user to access files that reside outside the 'image' folder. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Avalanche 6.""" from kittysploit import from lib.protocols.http.httpclient import...

MobileIron Core - Remote Unauthenticated API Access Detection

Ivanti Endpoint Manager Mobile EPMM, formerly MobileIron Core, Since CVE-2023-35082 arises from the same place as CVE-2023-35078, specifically the permissive nature of certain entries in the mifs web application’s security filter chain. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Endpoint...

Ivanti Connect Secure CVE-2024-21887 Detection

Detects the CVE-2023-46805 auth-bypass path that enables CVE-2024-21887 command injection by reading restricted JSON APIs without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti Connect Secure CVE-2024-21887 surface via CVE-2023-46805 auth bypass.""" from kittysploit import fr...

Ivanti EPM Cloud Services Appliance Code Injection Detection

Ivanti EPM Cloud Services Appliance CSA before version 4.6.0-512 is susceptible to a code injection vulnerability because it allows an unauthenticated user to execute arbitrary code with limited permissions nobody. !/usr/bin/env python3 -- coding: utf-8 -- """Ivanti EPM Cloud Services Appliance C...

Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass Detection

Ivanti Endpoint Manager Mobile EPMM, formerly MobileIron Core, through 11.10 allows remote attackers to obtain PII, add an administrative account, and change the configuration because of an authentication bypass, as exploited in the wild in July 2023. A patch is available. !/usr/bin/env python3 -...

Ivanti Cloud Services Appliance - Path Traversal Detection

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. !/usr/bin/env python3 -- coding: utf-8 -- """Path Traversal in the Ivanti CSA before 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclien...

Ivanti Sentry - OS Command Injection Detection

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution !/usr/bin/env python3 -- coding: utf-8 -- """An OS Command Injection vulnerability in Ivanti Sentry before the...

Ivanti Sentry CVE-2026-10520 unauthenticated OS command injection

CVE-2026-10520: Ivanti Sentry before R10.5.2, R10.6.2, R10.7.1 exposes /mics/api/v2/sentry/mics-config/handleMessage without authentication. An attacker can inject OS commands via the commandexec MICS message and achieve root-level remote code execution. !/usr/bin/env python3 -- coding: utf-8 --...

Ivanti Sentry CVE-2026-10520 detection

Detects Ivanti Sentry vulnerable to CVE-2026-10520 by posting a benign commandexec id to /mics/api/v2/sentry/mics-config/handleMessage and checking for unauthenticated root-level command output. !/usr/bin/env python3 -- coding: utf-8 -- import json import re from urllib.parse import quote from...