Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2023-46805

CVSS 8.2 Actively exploited (KEV) 3 detections found
View on NVD →
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

Detection rules

Source Rule Status Updated
splunk Access to Vulnerable Ivanti Connect Secure Bookmark Endpoint production 2026-05-13
splunk Ivanti Connect Secure Command Injection Attempts production 2026-05-13
splunk Ivanti Connect Secure System Information Access via Auth Bypass production 2026-05-13