CVE-2026-121653

Summary

A SQL injection vulnerability (CWE-89) exists in the Core component of Ivanti Endpoint Manager prior to version 2024 SU8, allowing unauthenticated remote attackers to inject malicious SQL and achieve remote code execution. This is critical due to the combination of no authentication requirement and full system compromise potential.

Exploitability

Exploitation is straightforward for remote unauthenticated attackers due to low attack complexity and no user interaction required.

Blast radius

Successful exploitation could lead to full compromise of the Ivanti Endpoint Manager server, including data exfiltration, lateral movement within managed endpoints, and disruption of endpoint management operations across the enterprise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Ivanti Endpoint Manager to version 2024 SU8 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.