New Vulnerabilities Patched in Ivanti Endpoint Manager

THREAT INTELLIGENCE

Peer Review

4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.

ISO 27001 text with a globe outline symbol on a black background.

2025 winner badge for Cyber Security Excellence Awards with gold and black design.

High

CVE-2026-1603, CVE-2026-1602

Ivanti

February 11, 2026

Executive Summary

Ivanti Endpoint Manager vulnerabilities enable authentication bypass and SQL injection. Upgrade to 2024 SU5 to prevent credential leakage.

Key Details

Affected Platform

Ivanti Endpoint Manager

Attack Surface

Recommended Action

Affected Environment

Operational Impact

Risk is High for enterprise and government environments relying on Ivanti EPM for centralized endpoint control. Credential exposure may lead to lateral movement, endpoint compromise, and broader infrastructure impact. SQL injection could enable sensitive data extraction from the management database.

Technical Root Cause

Recommended Mitigation

Restrict exposure of management interfaces, enforce network segmentation, and apply the Principle of Least Privilege. Maintain structured vulnerability management, enable application control where possible, and conduct periodic authenticated penetration testing of management infrastructure.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore Managed Detection and Response

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

https://hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024?language=en_US