https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-8111.htmlhttps://patchthecve.com/cve/CVE-2026-8111.htmlMon, 26 Oct 2026 18:10:00 +0000HIGH 8.8: SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.https://patchthecve.com/cve/CVE-2026-8110.htmlhttps://patchthecve.com/cve/CVE-2026-8110.htmlMon, 26 Oct 2026 18:10:00 +0000HIGH 7.8: Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.https://patchthecve.com/cve/CVE-2026-8109.htmlhttps://patchthecve.com/cve/CVE-2026-8109.htmlMon, 26 Oct 2026 18:10:00 +0000MEDIUM 6.5: An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials.