CVE-2026-121653

Ivanti Endpoint Manager remote code execution via SQL injection in Core

critical · 9.8

Ivanti Endpoint Manager

Published Nov 10, 2026, 15:28 UTC

Description

SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.