Medium severity6.3NVD Advisory· Published Nov 10, 2026

CVE-2026-105813

Description

Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token.

Affected products

Ivanti/User Workspace Managerllm-create
Range: <2026.4

Patches

Vulnerability mechanics

References

hub.ivanti.com/s/article/Security-Advisory-Ivanti-User-Workspace-Manager-CVE-2026-105813nvd

News mentions

Ivanti Patches New Security Flaws Affecting Endpoint Manager, EPMM, Sentry, CSA, and Workspace Manager
Cyber Security News · Nov 10, 2026

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000