CVE-2026-18125

Ivanti Endpoint Manager versions prior to 2024 SU7 are vulnerable to an out-of-bounds read, which can be exploited by remote unauthenticated attackers to crash the agent service. This vulnerability poses a significant risk as it can disrupt endpoint management operations and potentially lead to further exploitation. Organizations using affected versions should prioritize patching to mitigate the risk of service disruption and enhance overall security posture.