Ivanti Endpoint Manager - Authentication Bypass

Ivanti Endpoint Manager 2024 SU5 contains an authentication bypass caused by improper access control, letting remote unauthenticated attackers leak stored credential data, exploit requires no special privileges. id: CVE-2026-1603 info: name: Ivanti Endpoint Manager - Authentication Bypass author:...

CVE-2026-1603

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data...

CVE-2026-1603

creationtimestamp| type| source ---|---|--- 2026-02-10 16:17:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejegksy3522 2026-02-10 16:18:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mejehqfp3l2h 2026-02-11 04:00:00+00:00| seen|...

CVE-2026-1603

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data...

CVE-2026-1603

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data...

CVE-2026-1603

Summary (CVE-2026-1603): Ivanti Endpoint Manager (EPM) before version 2024 SU5 contains an authentication bypass that allows a remote unauthenticated attacker to leak specific stored credential data. This vulnerability arises from improper access control, enabling exposure of credentials without ...

Security Advisory EPM February 2026 for EPM 2024

Update 18 Feb: Added FAQ on patching Agents. Summary Ivanti has released updates for Ivanti Endpoint Manager which addresses one high severity vulnerability and one medium severity vulnerability. Successful exploitation could allow a remote authenticated attacker to leak arbitrary data or...

MiracleLinux 7 : tomcat-7.0.69-11.el7 (AXSA:2017-1603:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1603:01 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Ja...

CVE-2024-20100

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998449; Issue ID: MSV-1603...

CVE-2023-1603

creationtimestamp| type| source ---|---|--- 2025-02-25 17:23:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5331...

CVE-2024-1603

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

Upgrade from StoreFront 2.1 to 2.5 Fails

Upgrade from StoreFront 2.1 to 2.5 fails. Event log reported the following error: CitrixStoreFront-x64.msi' failed with error code 1603. Fatal error during installation. StoreFront log from the installation reported the following error: Remove-DSFeatureInstance: Error Access to the path...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2024-1603 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves: CVE-2024-16...

CVE-2024-1603

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603 confirmed

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603 confirmed

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603

CVE-2024-1603 affects paddlepaddle/paddle v2.6.0, enabling a read of arbitrary files via paddle.vision.ops.read_file. The issue arises from how the read_file interface handles input validation, per multiple sources in the connected documents. Impact is High for confidentiality, with no reported i...

Cisco Unified IP Phones 7900 Permissions, Privileges, and Access Controls (CVE-2011-1603)

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Malicious code in wlwz-2312-1603 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70279411358b52cdd327016e958622c5790068d244122923a8a99ac1d84bc960 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...