VDB
CVE-2026-1602
CVE-2026-1602
PUBLISHED
CVSS 6.5 MEDIUM
De multiples vulnérabilités ont été découvertes dans Ivanti Endpoint Manager. Elles permettent à un attaquant de provoquer une injection SQL (SQLi) et un contournement de la politique de sécurité.
EPSS 0.21% · 42.9th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.21%
42.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ivanti | endpoint_manager | 2024, 2024, 2024 |
| Ivanti | Endpoint Manager (EPM) | |
| Ivanti | Endpoint Manager | 2024 SU5, 2024 SU5 |
Timeline
- Jan 29, 2026 CVE ID Reserved
- Feb 10, 2026 CVE Published
- Feb 11, 2026 EPSS Score
- Feb 11, 2026 PoC Published
- Feb 11, 2026 PoC Published
- Feb 12, 2026 PoC Published
- Feb 13, 2026 EPSS Score
- Feb 14, 2026 PoC Published
- Feb 15, 2026 EPSS Score
- Feb 17, 2026 EPSS Score
- Feb 19, 2026 EPSS Score
- Feb 21, 2026 EPSS Score
References
- https://www.ivanti.com/blog/february-2026-security-update advisory
- https://forums.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024 advisory
- https://hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024?language=en_US url
- https://nvd.nist.gov/vuln/detail/CVE-2026-1602 advisory