CVE-2023-46266: Ivanti Avalanche

Critical severity, CVSS 9.1. EPSS: 3.5% chance of exploitation in the next 30 days.

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.

Affected products

• Ivanti Avalanche: up to and including 6.4.1

Published 2023-12-19. Last modified 2026-06-17.