Ivanti EPM Update Patches Remotely Exploitable Flaws

Impact

Successful exploitation of CVE-2026-18129 could allow an unauthenticated remote attacker in a man-in-the-middle position to leak credentials for external SQL connections, potentially compromising database access. CVE-2026-18125 could cause denial of service by crashing the EPM agent service. CVE-2026-18127 could allow an authenticated attacker to gain full write control over an S3 bucket configured for session recording storage, risking data integrity and confidentiality. The Neurons for MDM vulnerability could disclose sensitive information via remote command injection but requires no customer action due to vendor-managed patching. No evidence of exploitation in the wild has been reported.