CVE-2024-50326

Summary

CVE-2024-50326 is a newly disclosed SQL injection vulnerability affecting Ivanti Endpoint Manager versions prior to the November 2024 Security Update and 2022 SU6. An authenticated attacker with administrative privileges can exploit this issue to execute remote code, posing a significant security risk. The vulnerability is categorized as a SQL injection, allowing malicious actors to inject malicious SQL statements into the application and gain unauthorized access to sensitive data or even take control of the system. It is highly recommended that users install the latest security updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.