Ivanti: October 2026 Security Update
Ivanti has published a new security advisory. Here is a summary and what to do.
Key points
- New advisory from Ivanti.
- Review affected versions in the advisory.
- Apply updates promptly.
Ivanti published a security advisory titled “October 2026 Security Update”.
At a glance
- Publisher
- Ivanti
- CVEs
- See advisory
What the advisory says
Security is foundational to how Ivanti builds, tests, and supports our products. We continue to strengthen our secure product development practices through vulnerability discovery, responsible disclosure processes, security testing, threat-informed hardening, and coordinated response programs. Additionally, we recognize the importance of clear, timely communication when security issues arise. To that end, today we are disclosing a vulnerability in limited versions of Ivanti Connect Secure. At the time of disclosure, Ivanti is aware of limited exploitation in the wild. We are working directly with those organizations while making information, updates and remediation available to the broader customer community. If you are running one of the impacted versions, Ivanti recommends you act immediately. Additional information related to the impacted versions and remediations can be found in the
What should you do?
- Read the full vendor advisory linked below and confirm whether you run affected versions.
- Schedule the recommended update, prioritising internet-facing systems.
- Watch for exploitation reports; unpatched edge devices are frequent targets.
What to do and how to stay safe: Ivanti
- Patch scores alone ignore context like network exposure and asset criticality.
- You must map vulnerabilities to specific business risks to prioritize correctly.
- Continuous exposure data replaces static scanning for accurate prioritization.
Prioritize vulnerabilities by actual exploitability and business impact, not by theoretical severity scores. Update your asset context and exposure data continuously to maintain accurate risk rankings.
Step-by-step guide: Risk Based Vulnerability Management: Prioritize Fixes by Actual Threat
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
