PT-2026-70215
CVE-2026-18129
·
Published
2026-08-11
·
Updated
2026-10-27
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Ivanti Endpoint Manager versions prior to 2024 SU7
Description
Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager allows a remote unauthenticated attacker in a Man-in-the-Middle (MITM) position—where an attacker intercepts communication between two parties—to leak credentials used for external SQL connections.
Recommendations
Update Ivanti Endpoint Manager to version 2024 SU7 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾