CVE-2026-18128

Ivanti Endpoint Manager sensitive data exposure in Agent

medium · 6.8

Ivanti Endpoint Manager

Published Nov 10, 2026, 15:30 UTC

Description

Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to in a MITM position to read and modify HTTP traffic.

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.