Endpoint Manager CVE Vulnerabilities
By Ivanti — 3 known vulnerabilities
Critical
0
High
2
Medium
1
Low
0
None
0
All Endpoint Manager CVEs
CVE-2026-8111
8.8
high
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.
May 12, 2026
CVE-2026-8110
7.8
high
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.
May 12, 2026
CVE-2026-8109
6.5
medium
An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials.
May 12, 2026