CVE-2026-8111

No fix known EPSS 6%CVSS 8.8

SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.

Published 2026-05-12 · CVE record · OSV

Products: ivanti endpoint_manager