ZDI-26-080
HIGH 8.6
Published
Feb 12, 2026
Ivanti Endpoint Manager AuthHelper Authentication Bypass Vulnerability
Ivanti
Ivanti Endpoint Manager contains an authentication bypass vulnerability (CVE-2026-1603) that allows remote attackers to gain unauthorized access without credentials, earning a high CVSS score of 8.6. This flaw poses a significant risk as attackers can exploit it to potentially compromise endpoint management infrastructure and the systems it controls. Security teams should prioritize patching affected Ivanti installations immediately and consider implementing network segmentation to limit exposure while updates are deployed.