CVE-2026-18129

Ivanti Endpoint Manager versions prior to 2024 SU7 are vulnerable to a high-severity issue that allows remote unauthenticated attackers to intercept sensitive information, specifically credentials for external SQL connections, due to cleartext transmission. This vulnerability poses a significant risk for organizations using affected versions, as it could lead to unauthorized access to databases and sensitive data. Organizations utilizing Ivanti Endpoint Manager should prioritize applying the latest updates to mitigate this risk.