Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
CISA has identified a high-severity vulnerability in Ivanti Endpoint Manager (EPM), tracked as CVE-2026-1603, which is currently being exploited in attacks. The flaw allows remote threat actors to bypass authentication and steal credential data, prompting an urgent directive for U.S. federal agencie...
Ivanti has released security updates addressing critical vulnerabilities in its Endpoint Manager (EPM), Endpoint Manager Mobile (EPMM), Cloud Services Application (CSA), and other products. The most severe flaw, CVE-2026-121653, is a SQL injection vulnerability with a CVSS score of 9.8, allowing una...
Ivanti has issued security updates for a critical vulnerability (CVE-2025-10573) in its Endpoint Manager (EPM) product. This flaw could allow remote, unauthenticated attackers to execute arbitrary JavaScript code, affecting users and administrators of the impacted versions. Immediate updates are adv...
