Ivanti Endpoint Manager Vulnerabilities Let Remote Attackers Crash Agent Service

Cybersecuritynews •Guru Baran • August 11, 2026

Ivanti has issued a security advisory for Ivanti Endpoint Manager (EPM), disclosing three high-severity vulnerabilities that could allow remote attackers to crash agent services, hijack cloud storage configurations, and intercept sensitive database credentials. Published on August 11, 2026, the advisory impacts all EPM 2024 SU6 and earlier deployments, urging security teams to update to the […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ivanti EPM Patches Critical Vulnerabilities Affecting Cloud and Database Security Ivanti has released updates for its Endpoint Manager (EPM) software to address three critical vulnerabilities. These vulnerabilities allow remote attackers to intercept sensitive database credentials, manipulate cloud storage configurations, and crash the agent service. The vulnerabilities are identified as CVE-2026-18129, CVE-2026-18127, and CVE-2026-18125, all published on August 11, 2026. The affected versions include EPM 2024 SU6 and earlier. Ivanti advises users to upgrade to version 2024 SU7 or newer to mitigate risks. Despite the severity, Ivanti reports no known exploitation of these vulnerabilities in the wild. IT managers are urged to act promptly to minimize potential threats. This follows a previous patch released in mid-May for other vulnerabilities in the same software. 5 sources 72

Extracted Entities

Platforms (1)

Ivanti Endpoint Manager