What is the CVSS score of CVE-2026-1603?

CVE-2026-1603 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 43.9%.

Which versions of Endpoint Manager are affected by CVE-2026-1603?

An unauthenticated remote attacker can exploit a critical authentication bypass in Ivanti Endpoint Manager to steal stored credentials without a patch currently available.

Is CVE-2026-1603 being actively exploited?

Yes, CVE-2026-1603 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active in-the-wild exploitation. Immediate patching is required.

Endpoint Manager CVE-2026-1603

HIGH

Authentication Bypass Using an Alternate Path or Channel (CWE-288)

2026-02-10 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Authentication Bypass Ivanti Endpoint Manager

8.6

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

Added to CISA KEV

Mar 10, 2026 - 13:11 cisa

CISA KEV

CVE Published

Feb 10, 2026 - 16:16 nvd

HIGH 8.6

DescriptionNVD

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

AnalysisAI

Ivanti Endpoint Manager before 2024 SU5 contains an authentication bypass (CVE-2026-1603, CVSS 8.6) that allows unauthenticated remote attackers to leak stored credential data. KEV-listed with EPSS 43.9%, this vulnerability exposes credentials stored in the endpoint management platform — potentially including service accounts, deployment credentials, and other secrets used to manage the entire endpoint fleet.

RemediationAI

Within 24 hours: Identify all Ivanti Endpoint Manager instances and their versions; isolate systems running versions prior to 2024 SU5 from direct internet exposure. Within 7 days: Deploy network segmentation to restrict access to affected systems, implement enhanced monitoring for suspicious authentication attempts, and contact Ivanti support for patch availability timeline. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory