CVE-2026-1603

# CVE-2026-1603: Ivanti Endpoint Manager Authentication Bypass Ivanti Endpoint Manager (EPM) contains an authentication bypass flaw that permits remote, unauthenticated attackers to access an alternate code path or channel, exposing stored credential data without requiring valid credentials. **Impact:** Attackers can extract sensitive credentials—likely including domain accounts, API keys, or service account passwords—stored within EPM, enabling lateral movement and privilege escalation across managed endpoints. **Required Actions:** Immediately inventory all Ivanti EPM deployments. Apply patches from Ivanti when released. If patching is delayed, restrict network access to EPM administrative interfaces using firewall rules or network segmentation. Audit EPM logs for suspicious unauthenticated access attempts. Rotate credentials for all accounts managed or stored by affected EPM instances.