{"id":"EUVD-2026-121248","enisaUuid":"ff2de49a-6ced-352c-879d-724119a4976d","description":"SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.","datePublished":"Nov 10, 2026, 3:28:19 PM","dateUpdated":"Nov 11, 2026, 10:51:26 AM","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-November-2026?language\u003den_US\n","aliases":"CVE-2026-121653\nGHSA-7fr5-xp8p-8vqx\n","assigner":"ivanti","epss":1.98,"enisaIdProduct":[{"id":"368f32b9-4176-38f1-bad6-45f95bf4b517","product":{"name":"Endpoint Manager","vendor":{"name":"Ivanti"}},"product_version":"patch: 2024 SU8"}],"enisaIdVendor":[{"id":"f455681e-5a16-35ab-8322-c7d89941453d","vendor":{"name":"Ivanti"}}],"enisaIdVulnerability":[{"id":"421366fa-e69e-3b85-a741-9431fc62409e","vulnerability":{"id":"GHSA-7fr5-xp8p-8vqx","description":"SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.","datePublished":"Nov 10, 2026, 6:31:39 PM","dateUpdated":"Nov 10, 2026, 6:31:39 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-121653\nhttps://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-November-2026?language\u003den_US\n","enisa_id":"EUVD-2026-121248\n","aliases":"CVE-2026-121653\nGHSA-7fr5-xp8p-8vqx\n","epss":0.0,"dataProcessed":"Nov 12, 2026, 10:01:47 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"a420d3ea-7bca-3aa5-8e1b-5d14cfc6273f","vulnerability":{"id":"CVE-2026-121653","description":"SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.","datePublished":"Nov 10, 2026, 3:28:19 PM","dateUpdated":"Nov 11, 2026, 10:51:26 AM","status":"PUBLISHED","baseScore":9.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-November-2026?language\u003den_US\n","enisa_id":"EUVD-2026-121248\n","assigner":"ivanti","epss":1.98,"dataProcessed":"Nov 12, 2026, 10:00:39 PM","vulnerabilityProduct":[{"id":"fbae2371-aafc-3c24-b7ad-9cea4a6a2bc4","product":{"name":"Endpoint Manager","vendor":{"name":"Ivanti"}},"product_version":"patch: 2024 SU8"}],"vulnerabilityVendor":[{"id":"36b7d99a-6745-3526-ac0b-27629b7cbe5e","vendor":{"name":"Ivanti"}}]}}],"enisaIdAdvisory":[]}