CVE-2026-18129: Cleartext transmission of sensitive information in the Core
Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker in a MITM position to leak credentials for external SQL connections.
- EPSS 1.5% (72.7% percentile)
- CVSS 8.1 high