{"affected":[{"defaultStatus":"affected","product":"Endpoint Manager","source":"CNA: ivanti","vendor":"ivanti","versions":[{"status":"unaffected","version":"2024 SU8"}]}],"cveId":"CVE-2026-121653","cwes":["CWE-89"],"description":"SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.8,"severity":"critical","source":"CNA: ivanti","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":9.8,"severity":"critical","source":"NVD: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794395834527,"publishedAt":1794324499820,"references":[{"source":"CNA: ivanti","tags":[],"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-November-2026?language=en_US"},{"source":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","tags":[],"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-November-2026?language=en_US"}],"remediation":[],"revision":"88c4adbd6cc63dc944dfe47755b8177db42eb5ad61384d8c792848260a021e37","sources":[{"modifiedAt":1794394286376,"name":"CNA: ivanti","retrievedAt":1794395333891,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121653"},{"modifiedAt":1794395834527,"name":"NVD","retrievedAt":1794399380961,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121653"}],"ssvc":{"assessedAt":1794372971668,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2026-121653","updatedAt":1794399380961}