This vulnerability (CVE-2026-8109) affects Ivanti Endpoint Manager Core Server versions prior to 2024 SU6. It is classified under CWE-749 (Exposed Dangerous Method or Function). The flaw allows a remote attacker with valid authentication to exploit an exposed method to leak access credentials. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high confidentiality impact without affecting integrity or availability. No patch or official remediation level has been provided yet, and no exploits are known in the wild.

A remote authenticated attacker can leverage the exposed dangerous method to leak sensitive access credentials, potentially compromising confidentiality of the system. Integrity and availability are not affected according to the CVSS vector. This could lead to unauthorized access if credentials are further abused.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Core Server to trusted users only and monitor for suspicious authenticated activity related to credential access. Avoid exposing the Core Server to untrusted networks.