CVE-2026-8109

Description

An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials.

PUBLISHED Reserved 2026-05-07 | Published 2026-05-12 | Updated 2026-05-12 | Assigner ivanti

Problem types

CWE-749 Exposed dangerous method or function

Product status

References

hub.ivanti.com/...dpoint-Manager-EPM-May-2026?language=en_US

cve.org (CVE-2026-8109)

nvd.nist.gov (CVE-2026-8109)

Download JSON