Is CVE-2026-18125 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18125?

CVE-2026-18125 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-18125

Description

An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.