7.8
High
CVE-2026-8110 Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows…
Description
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Endpoint Manager | Versions not published |
References
- hub.ivanti.com hub.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Endpoint Manager
The 71 CVEs of Endpoint Manager →
CVE-2026-18129
Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows…
8.1
High
CVE-2026-18127
External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote…
7.7
High
CVE-2026-18125
An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote…
7.5
High
CVE-2026-8111
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated…
8.8
High