TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

CIS Advisories

Multiple Vulnerabilities in Ivanti Endpoint Manager Could Allow for Authentication Bypass

2026-02-10 · Read original ↗

ATT&CK techniques detected

2 predictions
T1190Exploit Public-Facing Application
82%
"##0001 ) : technique : exploit public - facing application ( t1190 ) : - an authentication bypass in ivanti endpoint manager before version 2024 su5 allows a remote unauthenticated attacker to leak specific stored credential data. ( cve - 2026 - 1603 ) - sql injection in ivanti e…"
T1078.001Default Accounts
75%
"to find potentially exploitable software vulnerabilities to remediate them. ( m1016 : vulnerability scanning ) - safeguard 16. 13 : conduct application penetration testing : conduct application penetration testing. for critical applications, authenticated penetration testing is b…"

Summary

Multiple vulnerabilities have been discovered in Ivanti Endpoint Manager, the most severe of which could allow for authentication bypass. Ivanti Endpoint Manager is a client-based unified endpoint management software. Successful exploitation of the most severe of these vulnerabilities could a remote unauthenticated attacker to leak specific stored credential data.