CVE-2026-8110

Description

Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.

PUBLISHED Reserved 2026-05-07 | Published 2026-05-12 | Updated 2026-05-13 | Assigner ivanti

Problem types

CWE-732: Incorrect Permission Assignment for Critical Resource

Product status

References

hub.ivanti.com/...dpoint-Manager-EPM-May-2026?language=en_US

cve.org (CVE-2026-8110)

nvd.nist.gov (CVE-2026-8110)

Download JSON