What is the CVSS score of CVE-2026-3483?

CVE-2026-3483 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Ivanti are affected by CVE-2026-3483?

CVE-2026-3483 affects Ivanti DSM and allows authenticated users with local access to gain elevated system privileges, potentially compromising sensitive data and critical infrastructure.

How to fix or mitigate CVE-2026-3483?

Within 24 hours: Inventory all Ivanti DSM deployments and identify systems running versions prior to 2026.1.1; restrict local access to DSM systems to trusted administrative personnel only. Within 7 days: Implement network segmentation to isolate DSM systems; enable enhanced logging and monitoring for privilege escalation attempts; review and revoke unnecessary local user accounts. Within 30 days: Monitor Ivanti security advisories for patch release; conduct penetration testing of DSM systems post-remediation; plan and execute upgrade to version 2026.1.1 or later once available.

Ivanti CVE-2026-3483

HIGH

Exposed Dangerous Method or Function (CWE-749)

2026-03-10 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Ivanti

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:19 nvd

HIGH 7.8

DescriptionCVE.org

An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges.

AnalysisAI

Privilege escalation in Ivanti DSM versions before 2026.1.1 stems from an exposed dangerous method that allows authenticated local users to gain elevated system privileges. An attacker with local access could exploit this vulnerability to obtain high-level permissions, compromising system integrity and confidentiality. No patch is currently available for this issue.

Technical ContextAI

Affects Desktop \& Server Management. An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges.

RemediationAI

Monitor vendor advisories for a patch.

More in Ivanti

View all

CVE-2024-21887 CRITICAL Emergency POC

9.1 Jan 12

Ivanti Connect Secure and Policy Secure contain an authenticated command injection in web components allowing administra

CVE-2021-44529 CRITICAL Act Now POC

9.8 Dec 08

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execut

CVE-2023-46805 HIGH Act Now POC

8.2 Jan 12

Ivanti Connect Secure and Policy Secure contain an authentication bypass in the web component allowing unauthenticated a

CVE-2024-21893 HIGH Act Now POC

8.2 Jan 31

Ivanti Connect Secure and Policy Secure contain an SSRF vulnerability in the SAML component allowing unauthenticated acc

CVE-2023-35078 CRITICAL Emergency POC

9.8 Jul 25

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re

CVE-2024-7593 CRITICAL Act Now POC

9.8 Aug 13

Authentication bypass in Ivanti Virtual Traffic Manager (vTM) admin panel allows remote unauthenticated attackers to gai

CVE-2024-13159 CRITICAL Emergency POC

9.8 Jan 14

Ivanti Endpoint Manager contains an absolute path traversal vulnerability allowing unauthenticated remote attackers to l

CVE-2024-13160 CRITICAL Emergency POC

9.8 Jan 14

Ivanti Endpoint Manager contains a second absolute path traversal vulnerability for unauthenticated information disclosu

CVE-2024-13161 CRITICAL Emergency POC

9.8 Jan 14

Ivanti Endpoint Manager contains a third absolute path traversal vulnerability for unauthenticated information disclosur

CVE-2025-0282 CRITICAL Emergency POC

9.0 Jan 08

Ivanti Connect Secure, Policy Secure, and Neurons for ZTA contain a stack-based buffer overflow allowing unauthenticated

CVE-2025-4427 MEDIUM This Month POC

5.3 May 13

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to a

CVE-2026-1281 CRITICAL Act Now POC

9.8 Jan 29

Ivanti Endpoint Manager Mobile (EPMM) contains a critical code injection vulnerability (CVE-2026-1281, CVSS 9.8) that al

Same weakness CWE-749 – Exposed Dangerous Method or Function

View all

CVE-2018-19322 HIGH POC

7.8

CVE-2025-26651 MEDIUM

6.5

CVE-2025-59403 CRITICAL POC

9.8

CVE-2026-30957 CRITICAL POC

9.9

CVE-2026-30921 CRITICAL POC

9.9

CVE-2022-4136 CRITICAL POC

9.8

CVE-2016-9469 HIGH POC

8.2

CVE-2023-26478 HIGH POC

8.1

CVE-2026-3483 vulnerability details – vuln.today

Back

Ivanti CVE-2026-3483

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Ivanti

Same weakness CWE-749 – Exposed Dangerous Method or Function

Share

External POC / Exploit Code