What’s Vulnerable › Products

Ivanti Connect Secure (Pulse Secure) vulnerabilities

134 known vulnerabilities, 16 confirmed exploited in the wild (CISA KEV), 56 published in the last 12 months.

Check whether your Ivanti Connect Secure (Pulse Secure) version is affected

Exploited Ivanti Connect Secure (Pulse Secure) vulnerabilities

• CVE-2026-111357 — Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
• CVE-2026-104935 — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
• CVE-2025-22457 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
• CVE-2025-0282 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
• CVE-2024-21893 — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
• CVE-2024-21887 — Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
• CVE-2023-46805 — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
• CVE-2020-8218 — Pulse Connect Secure Code Injection Vulnerability
• CVE-2021-22900 — Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
• CVE-2021-22899 — Ivanti Pulse Connect Secure Command Injection Vulnerability
• CVE-2021-22894 — Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
• CVE-2021-22893 — Ivanti Pulse Connect Secure Use-After-Free Vulnerability
• CVE-2020-8260 — Ivanti Pulse Connect Secure Code Execution Vulnerability
• CVE-2020-8243 — Ivanti Pulse Connect Secure Code Execution Vulnerability
• CVE-2019-11539 — Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
• CVE-2019-11510 — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

Latest Ivanti Connect Secure (Pulse Secure) vulnerabilities

• CVE-2026-111357 — Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability (CVSS 7.0) — exploited
• CVE-2026-104935 — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (CVSS 8.6) — exploited
• CVE-2025-8712 — (CVSS 5.4)
• CVE-2025-8711 — (CVSS 5.4)
• CVE-2025-55148 — (CVSS 7.6)
• CVE-2025-55147 — (CVSS 8.8)
• CVE-2025-55146 — (CVSS 4.9)
• CVE-2025-55145 — (CVSS 8.9)
• CVE-2025-55144 — (CVSS 5.4)
• CVE-2025-55143 — (CVSS 6.1)
• CVE-2025-55142 — (CVSS 8.8)
• CVE-2025-55141 — (CVSS 8.8)
• CVE-2025-55139 — (CVSS 6.8)
• CVE-2025-5468 — (CVSS 5.5)
• CVE-2025-5466 — (CVSS 4.9)
• CVE-2025-5462 — (CVSS 7.5)
• CVE-2025-5456 — (CVSS 7.5)
• CVE-2025-5464 — (CVSS 5.5)
• CVE-2025-0293 — (CVSS 2.7)
• CVE-2025-0292 — (CVSS 4.9)
• CVE-2025-5463 — (CVSS 5.5)
• CVE-2025-5451 — (CVSS 4.9)
• CVE-2025-5450 — (CVSS 2.7)
• CVE-2025-22457 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability (CVSS 9.8) — exploited
• CVE-2024-38657 — (CVSS 4.9)