CVE WATCH / VULNERABILITY DETAIL
CVE-2026-121653
CRITICALCVSS 9.8NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-125754 HIGH 7.1
- CVE-2026-125753 MEDIUM 5.9
- CVE-2026-125747 MEDIUM 5.4
- CVE-2026-124038 LOW 2.3
- CVE-2026-123181 MEDIUM 5.5
- CVE-2026-123179 MEDIUM 5.5
- CVE-2026-121683 CRITICAL 9.4
- CVE-2026-111256
- CVE-2026-111250
- CVE-2026-111249