Recent Ivanti Endpoint Manager Flaw Exploited in Attacks

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Active Exploitation of Vulnerabilities in Ivanti and SolarWinds Products The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of vulnerabilities in Ivanti Endpoint Manager, SolarWinds Web Help Desk, and VMware Workspace ONE. The vulnerabilities include CVE-2025-26399, CVE-2026-1603, and CVE-2021-22054, all of which have been added to CISA's Known Exploited Vulnerabilities (KEV) list as of March 9, 2026. 12 sources 70