Vulnerabilityhigh

Multiple Endpoint Manager bugs patched by Ivanti, including remote auth bypass

Security Affairsby @securityaffairsFeb 12, 2026 · 06:13 UTC (Feb 12, 2026)1 min read1

Read at securityaffairs.com

Analyze CVE-2026-1603 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-1603 CVE-2026-1602 CVE-2025-10573

Tags: cve-2026-1603 cve-2026-1602 cve-2025-10573 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-10573	Stored Cross-Site Scripting in Ivanti Endpoint Manager Exposes Admin Sessions	6.1	33%		Dec 9, 2025
CVE-2026-1602	SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database	6.5	<1%		Feb 10, 2026
CVE-2026-1603	Authentication Bypass in Ivanti Endpoint Manager Leaks Stored Credentials	7.5	88%	KEV	Feb 10, 2026 KEV Mar 9, 2026

From the original article

1 min read at securityaffairs.com

Ivanti patched over a dozen Endpoint Manager flaws, including a high-severity auth bypass that let attackers steal credentials remotely. Ivanti released patches for more than a dozen vulnerabilities in Endpoint Manager, including flaws disclosed in October 2025. The update addresses a high-severity authentication bypass, tracked as CVE-2026-1603 (CVSS score of 8.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.