Skip to content

CVE-2026-121653 SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.

CriticalCVSS 9.8
Published
Updated
Exploit status
No public exploit known

Description

SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.

Affected products

No affected product data has been published yet.

References