CVE-2026-18127

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions prior to 2024 SU7

Description An issue in the Core of the software allows a remote authenticated attacker to gain full write control over an S3 bucket used for session recording storage. This is caused by external control of a filename, which enables a path traversal attack, allowing the attacker to manipulate file paths to access or modify files outside the intended directory.

Recommendations Update to version 2024 SU7 or later.