CVE-2026-1603

No fix known ExploitedEPSS 88%CVSS 8.6

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

Published 2026-02-10 · In CISA KEV since 2026-03-09 · CVE record · OSV

Products: ivanti endpoint_manager