← Database

CVE-2026-18128

MEDIUM CVSS: 6.8 Published: 2026-11-10 Modified: 2026-11-10

Description

Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to in a MITM position to read and modify HTTP traffic.

Affected Platforms

Unknown

Weakness Type

CWE-319

References