Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-1602 EUVD-2026-6493GHSA-wh95-q2jr-gp4h

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the dat…

Published Feb 10, 2026 · Updated Nov 4, 2026 · Assigned by ivanti

Vendor: ivanti Product: Endpoint Manager Category: Network devices

Description

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database.

Affected products

VendorProductAffectedFixed
Ivanti Endpoint Manager — 2024 SU5

Advisories 2

References