Unrated severityCISA KEVNVD Advisory· Published Jan 12, 2024· Updated Oct 21, 2025

CVE-2023-46805

Description

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ivanti/Connect Securellm-fuzzy
Range: 9.x, 22.x
Ivanti/Policy Securellm-fuzzy
Ivanti/ICSv5
Range: 9.1R18
Ivanti/IPSv5
Range: 9.1R18

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.htmlmitre
forums.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gatewaysmitre

News mentions

Operation Escaneo Signals Shift in LatAm Threat Landscape
Dark Reading · Jun 18, 2026
LATAM Infrastructure Hit by Fortinet and Ivanti Exploits
Infosecurity Magazine · Jun 18, 2026
Inside the customer environment: Where threat actors, vulnerabilities, and exposed assets intersect
Tenable Blog · May 27, 2026

cvss	0.000
epss	0.080
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.060