CVE-2022-27088: Ivanti Dsm Remote

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Ivanti DSM Remote <= 6.3.1.1862 is vulnerable to an unquoted service path allowing local users to launch processes with elevated privileges.

Affected products

• Ivanti Dsm Remote: up to and including 6.3.1.1862

Published 2022-04-11. Last modified 2026-06-17.