CVE-2024-11006

score

<0.1

cvss

9.1

epss

1.6%

published

2024-11-12

kev added

—

first seen

2026-10-21

Ivanti Connect Secure before 22.7R2.1 and Ivanti Policy Secure before 22.7R1.1 contain a command injection caused by improper input validation in command execution functions, letting remote authenticated attackers with admin privileges execute arbitrary commands, exploit requires attacker to have admin privileges.