VulnSocial

CVE-2026-8111Disclosure(ivanti / endpoint_manager)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch ivanti endpoint_manager systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.

ivanti CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • endpoint_manager

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-12); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
ivanti
Products
endpoint_manager

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-12: 1Mentions · 2026-05-14: 1Patch / Workaround · 2026-05-14: 1Technical Details · 2026-05-12: 1Technical Details · 2026-05-14: 105-1205-14
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-121
Disclosure1
2026-05-141
Patch1
Full discourse2 posts
  • CCB Alert@CCBalert
    Patch

    Warning: Multiple critical and high vulnerabilities in #Ivanti #EndpointManager #EPM #VirtualTrafficManager #VTM #Xtraction #CVE-2026-8043 #CVE-2026-8051 #CVE-2026-8111 #CVE-2026-8110 CVSS: 9.6.-7.2 For details visit our advisory https://ccb.belgium.be/advisories/warning-ivanti-has-released-security-updates-address-vulnerabilities-affecting-several #Patch #Patch #Patch

    Post summary

    The tweet alerts users to several critical/high CVEs affecting Ivanti Endpoint Manager components and directs them to an advisory that contains the necessary patches.

    02010247
    7.2K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-8111 SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attac… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-8111 #Ivanti #CyberSecurity #InfoSec

    Post summary

    CVE‑2026‑8111 is a high‑severity SQL injection flaw in Ivanti Endpoint Manager’s web console that permits remote authenticated attacks; the announcement supplies technical details but no PoC, exploit code, or patch information.

    0000034
    90 followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
Appivantiendpoint_manager---
Appivantiendpoint_manager2024--
Appivantiendpoint_manager2024--
Appivantiendpoint_manager2024--
Appivantiendpoint_manager2024--
Appivantiendpoint_manager2024--
Appivantiendpoint_manager2024--
Appivantiendpoint_manager2024--
Appivantiendpoint_manager2024--

Explore more

Back to dashboardivanti CVEsendpoint_manager vulnerabilities