Skip to main content

Endpoint Manager (EPM) vulnerabilities

1 published alerts for Ivanti Endpoint Manager (EPM).

Actively exploited (KEV)

CVE-2026-1603

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

Ivanti Endpoint Manager (EPM) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-1603). Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticated attacker to leak specific stored credential data. CISA remediation due date: 2026-03-23. PremierePC tracks KEV alerts for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.