CVE-2023-41726: Ivanti Avalanche

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability

Affected products

• Ivanti Avalanche: before 6.4.1.236 (fixed in 6.4.1.236)

Published 2023-11-03. Last modified 2026-06-17.