CISA Warns of Active Exploitation in Ivanti Endpoint Manager Authentication Bypass

#cybersecurity #infosec

Summary

CISA added an Ivanti Endpoint Manager authentication bypass vulnerability (CVE-2026-1603) to its catalog of known exploited flaws after reports of active use by threat actors.

Take Action:

If you use Ivanti Endpoint Manager, now patching is urgent. Update to 2024 SU5 immediately because attackers are already using this flaw to take over management servers.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines