7.8

CVE-2026-8110

Medienbericht
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ivanti ≫ Endpoint Manager Version <= 2022
Ivanti ≫ Endpoint Manager Version2024 Update-
Ivanti ≫ Endpoint Manager Version2024 Updatesu1
Ivanti ≫ Endpoint Manager Version2024 Updatesu2
Ivanti ≫ Endpoint Manager Version2024 Updatesu3
Ivanti ≫ Endpoint Manager Version2024 Updatesu3_security_release_1
Ivanti ≫ Endpoint Manager Version2024 Updatesu4
Ivanti ≫ Endpoint Manager Version2024 Updatesu4_security_release_1
Ivanti ≫ Endpoint Manager Version2024 Updatesu5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.067
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
3c1d8aa1-5a33-4ea4-8992-aadd6440af75 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.