CVE-2026-3483

FAUCET Score

CVE-2026-3483 is a high-severity privilege escalation vulnerability impacting Ivanti Desktop & Server Management (DSM) versions before 2026.1.1. A local, authenticated attacker can exploit an exposed dangerous method with low complexity and no user interaction to achieve full impact on confidentiality, integrity, and availability. Rated with a CVSS score of 7.8, this vulnerability currently has no public exploit code, is not listed on CISA's KEV catalog, and shows minimal community or media attention, indicating a low probability of active exploitation.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 2026.1.1CPE matchmatch criteria	cpe:2.3:a:ivanti:desktop_\&_server_management::::::::

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.40%

Probability of exploitation in next 30 days

EPSS Percentile

32.3%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0040 is in the 72nd percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

ivantivendor investigatingvia vendor_rss

View patch

Vendor Advisories (1)

ivantiivanti:1bc1b6b1-a480-4f6a-88b0-749da8241d7d

March 2026 Security Update

Mar 10, 2026

References

hub.ivanti.com / s/article/Security-Advisory-Ivanti-DSM-CVE-2026-3483

Vendor Advisory