Known vulnerabilities in Endpoint Manager 2024 SU5

Vendor: Ivanti
Software: Endpoint Manager
Version: 2024 SU5
Software CPE: cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Endpoint Manager version 2024 SU5 Endpoint Manager 2024 SU5 is affected by 6 vulnerabilities: 3 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141421 - Out-of-bounds read
CVE-2026-18125		 CWE-125 Medium
No
No
 2024 SU7 11.08.2026 SB2026081132
#VU141422 - External Control of File Name or Path
CVE-2026-18127		 CWE-73 Low
No
No
 2024 SU7 11.08.2026 SB2026081132
#VU141423 - Improper Certificate Validation
CVE-2026-18129		 CWE-295 Medium
No
No
 2024 SU7 11.08.2026 SB2026081132
#VU131192 - Exposed Dangerous Method or Function
CVE-2026-8109		 CWE-749 Low
No
No
 2024 SU6 12.05.2026 SB2026051290
#VU131193 - Incorrect Permission Assignment for Critical Resource
CVE-2026-8110		 CWE-732 Low
No
No
 2024 SU6 12.05.2026 SB2026051290
#VU131194 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-8111		 CWE-89 Medium
No
No
 2024 SU6 12.05.2026 SB2026051290