Skip to content
OpenAdvisories
High · 7.8 CVE-2025-22458 EUVD-2025-10296GHSA-wq26-hpcc-wh38

DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to…

Published Apr 8, 2025 · Updated Feb 26, 2026 · Assigned by ivanti

Vendor: ivanti Product: Endpoint Manager Category: Network devices

Description

DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to System.

Affected products

VendorProductAffectedFixed
Ivanti Endpoint Manager — 2024 SU1

Advisories 2

References