Endpoint Manager (EPM) 2024 vulnerabilities

4 advisories affect Ivanti Endpoint Manager (EPM) 2024, 4 already exploited by attackers. Latest: March 9, 2026.

Running Endpoint Manager (EPM) 2024 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Endpoint Manager (EPM) 2024 alerts

Vulnerability	Severity	Affected versions
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability CVE-2026-1603 · March 9, 2026	High 8.6 Exploited	from 2024 to 2024 SU4 Security Release 1 Fixed in 2024 SU5
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13161 · March 10, 2025	Critical 9.8 Exploited	2024 Fixed in 2024 January-2025 Security Update
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13160 · March 10, 2025	Critical 9.8 Exploited	2024 Fixed in 2024 January-2025 Security Update
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability CVE-2024-13159 · March 10, 2025	Critical 9.8 Exploited	2024 Fixed in 2024 January-2025 Security Update

Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.

Other Endpoint Manager (EPM) versions: 2022