CVE-2026-121653
Published Nov 10, 2026
Last updated 14 hours ago
AI description
CVE-2026-121653 is a SQL injection vulnerability affecting the Core component of Ivanti Endpoint Manager (EPM). The flaw stems from the improper neutralization of special elements within SQL commands, which allows user-controlled inputs to modify database queries. By exploiting this vulnerability, a remote, unauthenticated attacker can achieve remote code execution (RCE) on the affected system. The vulnerability impacts Ivanti EPM versions prior to 2024 SU8. Disclosed by Ivanti on November 10, 2026, through their responsible disclosure program, the company reported no evidence of active exploitation in the wild at the time of public release. Organizations can resolve the issue by upgrading to Ivanti EPM 2024 SU8, which is available through the Ivanti License System.
- Description
- SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution.
- Source
- 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
- NVD status
- Received
CVSS 3.1
- Type
- Secondary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
- CWE-89
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
19
Ivanti corrigió 13 fallas, entre ellas la CVE-2026-121653 (CVSS 9,8), una inyección SQL en Endpoint Manager que permite RCE sin autenticación, y la CVE-2026-121683 (9,4) en CSA. Parches: EPM 2024 SU8 y CSA 5.0.8.1. #ciberseguridad #vulnerabilidades https://t.co/WszgVX3Xeu
@l0rdmalware
11 Nov 2026
62 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Critical Ivanti flaw allows hackers to execute code on enterprise management servers without authentication, CVE-2026-121653 Ivanti has released security updates addressing 13 vulnerabilities across five products, including a critical SQL injection flaw in Endpoint Manager
@DarkWebInformer
11 Nov 2026
6370 Impressions
3 Retweets
8 Likes
4 Bookmarks
3 Replies
0 Quotes
‼️ Ivanti patched a 9.8-rated flaw that lets anyone run code on its Endpoint Manager servers, the systems companies use to control their PCs, without logging in. The bug, CVE-2026-121653, is a SQL injection in versions before 2024 SU8. A second flaw, rated 9.4, lets attacker
@IntCyberDigest
11 Nov 2026
8616 Impressions
4 Retweets
44 Likes
5 Bookmarks
7 Replies
1 Quote
Ivanti fixed 13 flaws. Patch first: CVE-2026-121653 (CVSS 9.8, unauthenticated SQLi to RCE in Endpoint Manager, fixed in 2024 SU8) and CVE-2026-121683 (CVSS 9.4, CSA 5.0.8, fixed in 5.0.8.1). No known exploitation yet. #Ivanti #PatchNow https://t.co/k1gySNK4Nx https://t.co/h695Jo
@4tifysecurity
11 Nov 2026
2 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🔴 SQL injection in ivanti Endpoint Manager (CVE-2026-121653) Fix → 2024 SU8 https://t.co/YLjCRQsHgR
@agentprime_io
10 Nov 2026
40 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🆕 New CVE: CVE-2026-121653 (CVSS 9.8, Enclave score 5/10) ivanti Endpoint Manager · SQL injection Remote, no login needed. SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve… https://t.co/NgKA4I
@EnclaveRadar
10 Nov 2026
67 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2026-121653 (9.8) 🚨 Ivanti Endpoint Manager, the console IT teams use to manage employee devices, lets anyone who can reach it run commands on the server without logging in. Ivanti Endpoint Manager before 2024 SU8 is affected. Upgrade to 2024 SU8. https://t.co/EmoRo
@ParameterWatch
10 Nov 2026
48 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Urgent alert: Ivanti has patched critical security flaws in Endpoint Manager, CSA, Sentry, EPMM & UWM. Remote code execution, cert tampering, data leaks—fix now if you run versions before 2024 SU8 or CSA 5.0.8.1. Vulnerabilities CVE-2026-121653 & CVE-121683 are top prio
@dailytechonx
10 Nov 2026
76 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CRITICAL — CVE-2026-121653 SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker t… CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/Ad7TKtOQId #Ivanti #CyberSecurity #InfoSec
@KaitanSecurity
10 Nov 2026
27 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-121653 SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to achieve remote code execution. https://t.co/5sjdOoTpJt
@CVEnew
10 Nov 2026
837 Impressions
0 Retweets
0 Likes
1 Bookmark
0 Replies
0 Quotes
Ivanti security advisories fix 13 flaws, including Ivanti Endpoint Manager RCE CVE-2026-121653 (CVSS 9.8) and CSA bug CVE-2026-121683. #Ivanti #IvantiEPM #EPMM #CVE2026121653 #SQLInjection #RCE #PatchTuesday #CyberSecurity #InfoSec https://t.co/dCGBXmOPny
@Daily_CyberSec
10 Nov 2026
310 Impressions
0 Retweets
2 Likes
2 Bookmarks
0 Replies
0 Quotes
Ivanti Endpoint Manager: CVE-2026-121653 is a critical SQL injection (CVSS 9.8) in the Core. A remote unauthenticated attacker can achieve remote code execution. Affects versions before 2024 SU8. https://t.co/9jNJsuLDKC #CVE #CyberSecurity #Ivanti
@vulnipulse
10 Nov 2026
36 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes