CVE-2025-8296 – Ivanti Avalanche SQL Injection Remote Code Execution Vulnerability

CVE ID : CVE-2025-8296

Published : Aug. 12, 2025, 3:15 p.m. | 29 minutes ago

Description : SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrary SQL queries. In certain conditions, this can also lead to remote code execution

Severity: 7.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…