Unrated severityCISA KEVNVD Advisory· Published Feb 10, 2026· Updated Mar 10, 2026

CVE-2026-1603

Description

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

Affected products

Ivanti/Endpoint Manager Mobilecpe-rescue
Range: 2024 SU5

Patches

Vulnerability mechanics

References

hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.065
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000