CVE Catalog
CVE-2026-18125
HighCVSS 7.5Summary
Ivanti Endpoint Manager before 2024 SU7 has an out-of-bounds read vulnerability in the Agent, allowing a remote unauthenticated attacker to crash an agent service.
Risk Assessment
An attacker can cause denial of service of the agent service, potentially disrupting endpoint management operations.
Recommendation
Update Ivanti Endpoint Manager to version 2024 SU7 or later, which includes the fix.
Original NVD description (English source)
An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.