8.6
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.
AI Analysis
Authentication bypass vulnerability in Ivanti Endpoint Manager allowing remote unauthenticated attackers to leak stored credential data
Basic Information
ID
CVE-2026-1603
Source
ivanti
Published
Feb 10, 2026 at 15:09
Affected Product
Vendor
Ivanti
Product
Endpoint Manager
Version
2024 SU5
CWE Classification
AI Assessment
AI Score
8.6 / 10
AI Severity
High
Vendor
Ivanti
Product
Endpoint Manager
Version
2024 SU5 and earlier