NCSC-2026-0160

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Ivanti Endpoint Manager

view advisory published 2026-05-15

Ivanti heeft meerdere kwetsbaarheden verholpen in Ivanti Endpoint Manager, specifiek in de core server, de agent en de web console componenten.

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-8111US	—	6.31% (94th)	—	2026-05-12
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.
CVE-2026-8110US	—	0.24% (16th)	—	2026-05-12
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.
CVE-2026-8109US	—	0.70% (53rd)	—	2026-05-12
An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.