A vulnerability classified as critical was found in Ivanti Endpoint Manager up to 2024 SU5. The impacted element is an unknown function. The manipulation results in sql injection.

This vulnerability was named CVE-2026-1602. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.