Ivanti Connect Secure zero-day attacks exposed credentials and evaded security checks. Here’s what organizations need to patch and investigate. Weiterlesen: Ivanti VPN Zero-Day Attacks Target Credentials: What to Patch
Intelligence View
⚡ tsecurity.de Intelligence
Ivanti VPN Zero-Day Attacks Target Credentials: What to Patch
Ivanti Connect Secure zero-day attacks exposed credentials and evaded security checks. Here’s what organizations need to patch and investigate
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
9 sources
CVE-2026-68097 | Linux Kernel up to 7.2-rc4 ksmbd set_ntacl_dacl buffer overflow (Nessus ID 366919)
8 more sources
VVulDB Updates1 hour agoCVE-2026-68161 | Linux Kernel up to 7.2-rc4 SCTP sctp_ctrlsock_exit denial of service (Nessus ID 366919) VVulDB Updates1 hour agoCVE-2026-74565 | Linux Kernel up to 6.12.102/6.18.43/7.1.7/7.2-rc5 nf_tables nft_obj_destroy/nft_rcv_nl_event/nft_obj_lookup use after free (EUVD-2026-59630 / Nessus ID 366919) VVulDB Updates3 hours agoCVE-2023-52629 | Linux Kernel up to 2.6.20/6.5.3 push-switch flush_work use after free (610dbd8ac271/246f80a0b17f / Nessus ID 366919) VVulDB Updates3 hours agoCVE-2023-53231 | Linux Kernel up to 6.4.6 kernel/locking/mutex.c blk_mq_flush_plug_list stack-based overflow (Nessus ID 366919 / WID-SEC-2025-2053) VVulDB Updates3 hours agoCVE-2023-53538 | Linux Kernel up to 6.4.3 btrfs push_node_left null pointer dereference (EUVD-2023-60070 / Nessus ID 366919) VVulDB Updates3 hours agoCVE-2023-54233 | Linux Kernel up to 6.2.10 ASoC sof_ipc4_route_setup null pointer dereference (Nessus ID 366919 / WID-SEC-2025-2941)
+2
7 sources
CVE-2026-92883 | GitLab up to 19.2.7/19.3.4/19.4.1 HTML Attributes HTML injection (Nessus ID 366859)
6 more sources
VVulDB Updates6 hours agoCVE-2026-85529 | GitLab up to 19.2.7/19.3.4/19.4.1 GraphQL API improper authorization (Nessus ID 366858) VVulDB Updates6 hours agoCVE-2026-100755 | GitLab up to 19.2.7/19.3.4/19.4.1 Package Registry privileges management (Nessus ID 366855 / WID-SEC-2026-3858) VVulDB Updates6 hours agoCVE-2026-14210 | GitLab up to 19.2.7/19.3.4/19.4.1 Labels improper authorization (Nessus ID 366853) VVulDB Updates7 hours agoCVE-2026-92528 | GitLab up to 19.2.7/19.3.4/19.4.1 privileges management (Nessus ID 366866) VVulDB Updates7 hours agoCVE-2026-101168 | GitLab up to 19.2.7/19.3.4/19.4.1 Pages information disclosure (Nessus ID 366862 / WID-SEC-2026-3858) VVulDB Updates9 hours agoCVE-2026-96893 | GitLab up to 19.2.7/19.3.4/19.4.1 AI Conversation Context Construction neutralization (Nessus ID 366872)
6 sources
CVE-2026-111905 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha {userId} userId resource injection (EUVD-2026-103315)
5 more sources
VVulDB Updates9 hours agoCVE-2026-111904 | thorsten phpMyFAQ 4.2.0-alpha Open Question Controller /api/v4.0/open-questions OpenQuestionController information disclosure (EUVD-2026-103316) VVulDB Updates9 hours agoCVE-2026-111893 | Thorsten phpMyFAQ 4.2.0-alpha GroupController category-restrictions saveCategoryRestrictions categoryIds privileges management (EUVD-2026-103326) VVulDB Updates9 hours agoCVE-2026-111892 | thorsten phpMyFAQ up to 4.2.0-alpha.2 Rate Limiting allocation of resources (EUVD-2026-103327) VVulDB Updates9 hours agoCVE-2026-111891 | thorsten phpMyFAQ up to 4.2.0-alpha.2 Group Permission API updatePermissions privileges management (EUVD-2026-103328) VVulDB Updates9 hours agoCVE-2026-111890 | Thorsten phpMyFAQ up to 4.2.0-alpha.2 UserController updateUserRights privileges management (EUVD-2026-103329)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4273333/vulnerabilities-cve/ivanti-vpn-zero-day-attacks-target-credentials-what-to-patch/