PULSE
LIVE16signals / 24h
FEED
ransomorova reclama a Ganzhou Xinye Craft Co., Ltd. · HK · Manufacturingransompanzer reclama a Xpress Tech · Technologyransomqilin reclama a G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L · IT · Transportationransomqilin reclama a Crown Group · PK · Otherransomdragonforce reclama a QPC Global · GB · Otherransominterlock reclama a AngMar Companies · Not Foundransompayload reclama a B&B Hydraulik · DE · Manufacturingransompayload reclama a Stücheli Architekten · CH · Professional Servicesransompayload reclama a Baya Technologies · Technologyransomkrybit reclama a www.kilpi-koskinen.fi · FI · Otherransomkrybit reclama a www.apsanet.com.ar · AR · Professional Servicesransomqilin reclama a Service Evaluation Concepts · US · Professional Servicesransomqilin reclama a tommer construction · US · Manufacturingransomdirewolf reclama a Leafwell · US · Healthcareransomorova reclama a Ganzhou Xinye Craft Co., Ltd. · HK · Manufacturingransompanzer reclama a Xpress Tech · Technologyransomqilin reclama a G.M.A. GRANDI MARCHE AUTOMOBILI - S.R.L · IT · Transportationransomqilin reclama a Crown Group · PK · Otherransomdragonforce reclama a QPC Global · GB · Otherransominterlock reclama a AngMar Companies · Not Foundransompayload reclama a B&B Hydraulik · DE · Manufacturingransompayload reclama a Stücheli Architekten · CH · Professional Servicesransompayload reclama a Baya Technologies · Technologyransomkrybit reclama a www.kilpi-koskinen.fi · FI · Otherransomkrybit reclama a www.apsanet.com.ar · AR · Professional Servicesransomqilin reclama a Service Evaluation Concepts · US · Professional Servicesransomqilin reclama a tommer construction · US · Manufacturingransomdirewolf reclama a Leafwell · US · Healthcare
← All CVEs
CVE WatchAug 11, 2026

CVE-2026-18125

An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an a

CVSS

7.5

High

EPSS

KEV

Exploit Today

0-100

Published: Aug 11, 2026 · Last modified: Aug 11, 2026 · CWE-125

EPSS · 30d

Not enough EPSS history yet.

Technical description

An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-703286.5 MED
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.6h
CVE-2026-703276.5 MED
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.6h
CVE-2026-703155.5 MED
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.6h
CVE-2026-703105.5 MED
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.6h
CVE-2026-688147.8 HIG
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.6h
CVE-2026-688135.5 MED
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.6h