CVE-2026-1603

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

Affected

Ivanti · Endpoint Manager

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1 CNA

8.6 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS

88.33% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2026-03-09

Nuclei

high · CWE-288

Published

2026-02-10

Updated

2026-03-10

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1603.yaml

Security advisories

• https://hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024?languag…

References

• CVE Record
• NVD entry