CVE-2026-51119 Invixium CVE debrief

Who should care

Security teams and administrators responsible for Invixium IXM WEB v.2.3.85.25 should be aware of this vulnerability and take immediate action to mitigate the risk. They should review and update configurations, implement additional security controls, and consider applying patches or updates provided by the vendor to address this vulnerability.

Technical summary

The vulnerability is caused by an issue in the /SystemUsers/CreateAppUser components of Invixium IXM WEB v.2.3.85.25, which allows an attacker to escalate privileges. The CVSS vector for this vulnerability is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. Security teams should review and update configurations to restrict access to the /SystemUsers/CreateAppUser components and implement additional security controls to monitor and detect potential privilege escalation attempts.

Defensive priority

High

Recommended defensive actions

• Review and update the Invixium IXM WEB v.2.3.85.25 configuration to restrict access to the /SystemUsers/CreateAppUser components.
• Implement additional security controls to monitor and detect potential privilege escalation attempts.
• Consider applying patches or updates provided by the vendor to address this vulnerability.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record was published on 2026-07-10T17:16:57.587Z and was last modified on 2026-07-10T19:17:23.787Z. The NVD entry is currently Deferred. Evidence is limited to CVE and NVD information. Defenders should verify affected product deployments and review official advisories for scope and guidance.

Official resources