Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

Ivanti Connect Secure | 0-Doubt

Home
Vendors
Ivanti
Ivanti Connect Secure

Home
Vendors
Virtual Private Network (VPN)
Ivanti Connect Secure

Ivanti Connect Secure

AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 100 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Remote access VPN with zero trust security and unified client access

by Ivanti · ivanti.com · source ↗

Screenshots

1

Ivanti Connect Secure — screenshot

Known CVEs (100)

CVE-2024-23526 ↗HIGH 7.52024
An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information i…
CVE-2024-22061 ↗CRITICAL 9.82024
A Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to execute arbitrary commands
CVE-2024-21894 ↗

News about Ivanti Connect Secure (6)

All Ivanti news →

IncidentCVE-2026-104935: Ivanti Connect Secure Zero-Day Exploited for Unauthenticated Code Execution
Vendor blogOct 14, 2026names “Ivanti Connect Secure”
IncidentIvanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
Vendor blogOct 13, 2026names “Ivanti Connect Secure”
AnnouncementIvanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
Vendor blogOct 14, 2026names “Connect Secure”

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Virtual Private Network (VPN) products

Hotspot Shield VPN for Linux · Hotspot Shield
Hotspot Shield VPN for TV · Hotspot Shield
Intego Privacy Protection · Intego
Internxt VPN · Internxt
NCP Centrally Managed VPN Solution · NCP Engineering
NCP Secure Client VPN · NCP Engineering
NCP Secure Entry Client · NCP Engineering
NCP Secure Entry Client Suite · NCP Engineering

EPSS 19%CRITICAL 9.82024

A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to c…

…and 97 more · see all on the vendor page →

Announcement

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

Vendor blog·Oct 14, 2026·names “Ivanti Connect Secure”

AnnouncementCISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

Press release·Oct 14, 2026·names “Ivanti Connect Secure”

AnnouncementHackers abuse the Ivanti Connect Secure bug to gain access without accounts

Vendor blog·Oct 14, 2026·names “Ivanti Connect Secure”