High WID-SEC-2026-2769 3 CVEs

Ivanti Endpoint Manager: Mehrere Schwachstellen

Published Aug 11, 2026 · Updated Aug 11, 2026 · de-DE

Vendor: ivanti Product: Endpoint Manager Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.

Product

Ivanti Endpoint Manager ist eine Endpoint Management Software zur zentralen Verwaltung von Benutzerprofilen und -Geräten.

Vulnerabilities 3

High 8.1

CVE-2026-18129

Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a…

ivanti Endpoint Manager Network devices

Aug 11, 2026
High 7.7

CVE-2026-18127

External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authentic…

ivanti Endpoint Manager Network devices

Aug 11, 2026
High 7.5

CVE-2026-18125

An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated a…

ivanti Endpoint Manager Network devices

Aug 11, 2026

Revision history

2026-08-11 #1
Initiale Fassung

References

Security Advisory Ivanti Endpoint Manager (EPM) August 2026 vom 2026-08-11
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-August-2026
GitHub Security Advisory GHSA-9vrc-hrp5-9j72 vom 2026-08-11
https://github.com/advisories/GHSA-9vrc-hrp5-9j72
GitHub Security Advisory GHSA-mr3q-2wp4-2885 vom 2026-08-11
https://github.com/advisories/GHSA-mr3q-2wp4-2885
GitHub Security Advisory GHSA-4WMW-X67R-QXGQ vom 2026-08-11
https://github.com/advisories/GHSA-4WMW-X67R-QXGQ