Improper Neutralization of Special Elements in Data Query Logic in Ivanti Neurons for MDM (N-MDM) - #VU141420
Published: August 11, 2026
Vulnerability identifier: #VU141420
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-943
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to improper neutralization of special elements in data query logic in data query logic when handling crafted queries. A remote privileged user can send crafted query input to disclose sensitive information.
The issue can expose information from other tenants on the same server.
Affected software
Ivanti Neurons for MDM (N-MDM)
Remediation
Install security update from vendor's website.
Ivanti Neurons for MDM (N-MDM) - update to R124