PT-2026-70215 · Ivanti · Ivanti Endpoint Manager
CVE-2026-18129
·
Published
2026-08-11
·
Updated
2026-08-12
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Ivanti Endpoint Manager versions prior to 2024 SU7
Description
Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager allows a remote unauthenticated attacker in a Man-in-the-Middle (MITM) position—where an attacker intercepts communication between two parties—to leak credentials used for external SQL connections.
Recommendations
Update Ivanti Endpoint Manager to version 2024 SU7 or later.
Fix
Improper Certificate Validation
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ivanti Endpoint Manager