CVE-2026-1603 — Ivanti / Endpoint Manager

CVE-2026-1603

Ivanti / Endpoint Manager PUBLISHED

Description (CNA)

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

Affected (CNA)

Vendor / product	Versions
Ivanti / Endpoint Manager	unaffected 2024 SU5

CWE

CWE-288

References

https://hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-1603