Search
Find merged stories by title or summary.
Ivanti security advisory (AV26-805)
Serial Number: AV26-805 Date: August 11, 2026 As of August 11, 2026, Ivanti is affected by vulnerabilities in the following product: • Endpoint Manager • Prior to or equal to 2024 SU6 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. • Ivanti Innovators Hub Ivanti security advisory (AV26-805) - Canadian Centre for Cyber Security
Ivanti Endpoint Manager Vulnerabilities Let Remote Attackers Crash Agent Service
Ivanti has issued a security advisory for Ivanti Endpoint Manager (EPM), disclosing three high-severity vulnerabilities that could allow remote attackers to crash agent services, hijack cloud storage configurations, and intercept sensitive database credentials. Published on August 11, 2026, the advisory impacts all EPM 2024 SU6 and earlier deployments, urging security teams to update to the newly released 2024 SU7 build without delay. Ivanti Endpoint Manager Vulnerabilities The disclosed flaws span agent components, core management services, and external integrations: Tracked as CVE-2026-18125, this out-of-bounds read vulnerability in the EPM Agent carries a CVSS score of 7.5. It enables a remote, unauthenticated attacker to crash the agent service on managed endpoints by sending crafted input, requiring no user interaction or valid credentials.
You've reached the end of current stories for this search.