Skip to content

CVE record · 1 source

CVE-2026-121653

CVSS 9.8

SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code…

Vendor: Ivanti
Product: Endpoint Manager
CVSS v3.1: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-89
Exposure class: Network management

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

44

CVE NVD 2h ago

SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code…

SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.

CVSS 9.8 CVE-2026-121653 Ivanti