Ivanti Endpoint Manager vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 202415
3. 202545
4. 20268

Known exploitedNewest addition to KEV first

• CVE-2026-1603

  An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

  Ivanti · Endpoint Manager

  ExploitedHigh8.6
• CVE-2024-13159

  Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated…

  Ivanti · Endpoint Manager

  ExploitedCritical9.8
• CVE-2024-13160

  Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated…

  Ivanti · Endpoint Manager

  ExploitedCritical9.8
• CVE-2024-13161

  Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated…

  Ivanti · Endpoint Manager

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-18129

  Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker in a…

  Ivanti · Endpoint Manager

  High8.1
• CVE-2026-18127

  External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an…

  Ivanti · Endpoint Manager

  High7.7
• CVE-2026-18125

  An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.

  Ivanti · Endpoint Manager

  High7.5
• CVE-2026-8111

  SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.

  ivanti · Endpoint Manager

  High8.8
• CVE-2026-8110

  Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their…

  ivanti · Endpoint Manager

  High7.8
• CVE-2026-8109

  An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access…

  ivanti · Endpoint Manager

  Medium6.5
• CVE-2026-1603

  An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

  Ivanti · Endpoint Manager

  ExploitedHigh8.6
• CVE-2026-1602

  SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database.

  Ivanti · Endpoint Manager

  Medium6.5
• CVE-2025-13662

  Improper verification of cryptographic signatures in the patch management component of Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote…

  Ivanti · Endpoint Manager

  High7.8
• CVE-2025-13661

  Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write arbitrary files outside of the intended…

  Ivanti · Endpoint Manager

  High7.1