Known vulnerabilities in Endpoint Manager 2024 SU4 SR1

Known vulnerabilities in Endpoint Manager 2024 SU4 SR1

Vendor: Ivanti

Software: Endpoint Manager

Version: 2024 SU4 SR1

Software CPE: cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*

Website: https://www.ivanti.com/

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 1

Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU141421 - Out-of-bounds read CVE-2026-18125	CWE-125	Medium	No	No	2024 SU7	11.08.2026	SB2026081132
#VU141422 - External Control of File Name or Path CVE-2026-18127	CWE-73	Low	No	No	2024 SU7	11.08.2026	SB2026081132
#VU141423 - Improper Certificate Validation CVE-2026-18129	CWE-295	Medium	No	No	2024 SU7	11.08.2026	SB2026081132
#VU131192 - Exposed Dangerous Method or Function CVE-2026-8109	CWE-749	Low	No	No	2024 SU6	12.05.2026	SB2026051290
#VU131193 - Incorrect Permission Assignment for Critical Resource CVE-2026-8110	CWE-732	Low	No	No	2024 SU6	12.05.2026	SB2026051290
#VU131194 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-8111	CWE-89	Medium	No	No	2024 SU6	12.05.2026	SB2026051290
#VU122573 - Authentication Bypass Using an Alternate Path or Channel CVE-2026-1603	CWE-288	High	No	Exploited	2024 SU5	10.02.2026	SB2026021080
#VU122568 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-1602	CWE-89	Medium	No	No	2024 SU5	10.02.2026	SB2026021080