Critical (9.8) in ivanti avalanche. EPSS 82% chance of exploitation in the next 30 days.
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remote code execution.
Severity
CVSS 3.1
9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
82% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)