CVE-2024-11634

score

<0.1

cvss

9.1

epss

1.8%

published

2024-12-10

kev added

—

first seen

2026-10-21

Ivanti Connect Secure < 22.7R2.3 and Ivanti Policy Secure < 22.7R1.2 contain a command injection caused by improper input validation in the command execution component, letting a remote authenticated attacker with admin privileges execute arbitrary commands, exploit requires attacker to have admin privileges.