CVE-2024-10644

score

<0.1

cvss

9.1

epss

2.8%

published

2025-02-11

kev added

—

first seen

2026-10-21

Ivanti Connect Secure < 22.7R2.4 and Ivanti Policy Secure < 22.7R1.3 contain a code injection caused by insufficient input validation in the web interface, letting remote authenticated attackers with admin privileges execute arbitrary code, exploit requires attacker to have admin privileges.