Ivanti Patches Four Vulnerabilities in EPM and Neurons for MDM
Summary
Ivanti patched four vulnerabilities in EPM and Neurons for MDM. The flaws include remotely exploitable issues; Ivanti said it was unaware of customer exploitation at disclosure. EPM fixes are in version 2024 SU7, and MDM’s flaw was patched in R124.
Key points
- EPM version 2024 SU7 patches three high-severity vulnerabilities, including two exploitable remotely without authentication.
- CVE-2026-18129 could expose external SQL connection credentials to an attacker in a man-in-the-middle position.
- CVE-2026-18125 can crash the EPM agent service through an out-of-bounds read.
- CVE-2026-18127 allows remote attackers to control filenames; an authenticated attacker could gain full write control of an S3 bucket used for session recordings.
- Neurons for MDM version R124 patches a remotely exploitable command-injection flaw that could disclose sensitive information; Ivanti said no customer action is required.
- Ivanti said it was unaware of customer exploitation of the vulnerabilities at disclosure and had no evidence that the MDM flaw was exploited in the wild.
Article Details
- Vulnerability Types
- Cleartext transmission of sensitive information
- Out-of-bounds read
- Input validation weakness
- Command injection
- Severity
- High for the EPM vulnerabilities; medium for the Neurons for MDM vulnerability.
- Exploitation Status
- not_reported
- Exploit Availability
- unknown
- Patch Status
- available
MITRE ATT&CK
CVE
CVE-2026-18125Ivanti · Endpoint ManagerThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.CVE-2026-18127Ivanti · Endpoint ManagerBoth security defects were resolved in EPM version 2024 SU7, which also patches CVE-2026-18127, a high-severity input validation weakness that allows remote attackers to control filenames.CVE-2026-18129Ivanti · Endpoint ManagerTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external
Vendors
Products
Endpoint Manager (EPM)Enterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.Neurons for MDMEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.