What is the CVSS score of CVE-2026-3483?

CVE-2026-3483 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Ivanti are affected by CVE-2026-3483?

CVE-2026-3483 affects Ivanti DSM and allows authenticated users with local access to gain elevated system privileges, potentially compromising sensitive data and critical infrastructure.

How to fix or mitigate CVE-2026-3483?

Within 24 hours: Inventory all Ivanti DSM deployments and identify systems running versions prior to 2026.1.1; restrict local access to DSM systems to trusted administrative personnel only. Within 7 days: Implement network segmentation to isolate DSM systems; enable enhanced logging and monitoring for privilege escalation attempts; review and revoke unnecessary local user accounts. Within 30 days: Monitor Ivanti security advisories for patch release; conduct penetration testing of DSM systems post-remediation; plan and execute upgrade to version 2026.1.1 or later once available.

Ivanti CVE-2026-3483

HIGH

Exposed Dangerous Method or Function (CWE-749)

2026-03-10 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Ivanti

7.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:19 nvd

HIGH 7.8

DescriptionCVE.org

An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges.

AnalysisAI

Privilege escalation in Ivanti DSM versions before 2026.1.1 stems from an exposed dangerous method that allows authenticated local users to gain elevated system privileges. An attacker with local access could exploit this vulnerability to obtain high-level permissions, compromising system integrity and confidentiality. No patch is currently available for this issue.

Technical ContextAI

Affects Desktop \& Server Management. An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges.

RemediationAI

Monitor vendor advisories for a patch.

More in Ivanti

View all

CVE-2024-7593 CRITICAL Act Now POC

9.8 Aug 13

Authentication bypass in Ivanti Virtual Traffic Manager (vTM) admin panel allows remote unauthenticated attackers to gai

CVE-2024-13159 CRITICAL Emergency POC

9.8 Jan 14

Ivanti Endpoint Manager contains an absolute path traversal vulnerability allowing unauthenticated remote attackers to l

CVE-2024-13160 CRITICAL Emergency POC

9.8 Jan 14

Ivanti Endpoint Manager contains a second absolute path traversal vulnerability for unauthenticated information disclosu

CVE-2024-13161 CRITICAL Emergency POC

9.8 Jan 14

Ivanti Endpoint Manager contains a third absolute path traversal vulnerability for unauthenticated information disclosur

CVE-2025-0282 CRITICAL Emergency POC

9.0 Jan 08

Ivanti Connect Secure, Policy Secure, and Neurons for ZTA contain a stack-based buffer overflow allowing unauthenticated

CVE-2025-4427 MEDIUM This Month POC

5.3 May 13

An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to a

CVE-2026-1281 CRITICAL Act Now POC

9.8 Jan 29

Ivanti Endpoint Manager Mobile (EPMM) contains a critical code injection vulnerability (CVE-2026-1281, CVSS 9.8) that al

CVE-2026-1340 CRITICAL Emergency POC

9.8 Jan 29

Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that allows unauthenticated attackers to a

CVE-2025-22457 CRITICAL Emergency POC

9.0 Apr 03

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow enabling unauthenticated re

CVE-2025-4428 HIGH Act Now POC

7.2 May 13

Ivanti Endpoint Manager Mobile (EPMM) contains an authenticated code injection in the API component, allowing authentica

CVE-2026-1603 HIGH Act Now POC

8.6 Feb 10

Ivanti Endpoint Manager before 2024 SU5 contains an authentication bypass (CVE-2026-1603, CVSS 8.6) that allows unauthen

CVE-2026-10520 CRITICAL Emergency POC

10.0 Jun 09

Remote code execution in Ivanti Sentry before R10.5.2, R10.6.2, and R10.7.1 allows unauthenticated remote attackers to a

Same weakness CWE-749 – Exposed Dangerous Method or Function

View all

CVE-2025-26651 MEDIUM

6.5

CVE-2025-59403 CRITICAL POC

9.8

CVE-2026-30957 CRITICAL POC

9.9

CVE-2026-30921 CRITICAL POC

9.9

CVE-2022-4136 CRITICAL POC

9.8

CVE-2016-9469 HIGH POC

8.2

CVE-2023-26478 HIGH POC

8.1

CVE-2019-5015 HIGH POC

7.8

CVE-2026-3483 vulnerability details – vuln.today

Back

Ivanti CVE-2026-3483

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Ivanti

Same weakness CWE-749 – Exposed Dangerous Method or Function

Share

External POC / Exploit Code