Ivanti

Ivanti is a well-known enterprise IT management and cybersecurity software vendor. This medium-severity vulnerability (CVSS 4.9) can be exploited remotely without user interaction, but requires high-level administrative privileges; it poses a confidentiality risk with no impact to integrity or availability. Security teams should monitor for suspicious administrative account activities and patch when Ivanti releases a fix by the March 2026 deadline.