A vulnerability was found in Ivanti Endpoint Manager up to 2024 SU5 . It has been declared as critical . Affected is an unknown function. The manipulation results in incorrect permission assignment. This vulnerability is cataloged as CVE-2026-8110 . The attack must be initiated from a local position. There is no exploit available. It is recommended to upgrade the affected component.