High · 7.8 CVE-2024-10630 EUVD-2024-33589GHSA-885j-xrf7-wxg5

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the applicat…

Published Jan 14, 2025 · Updated Feb 26, 2026 · Assigned by ivanti

Vendor: ivanti Product: Application Control Engine Category: Network devices

Description

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	Application Control Engine	—	10.14.4.0

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Application-Control-Engine-CVE-2024-10630