Ivanti Patches Endpoint Manager Vulnerabilities Disclosed in October 2025
Source SecurityWeek
Rated High by SecurityWeek
Data as of 12 Feb 2026, 07:48 UTC
What to do
AI-suggested
Organizations should immediately verify if they use Ivanti Endpoint Manager and apply the vendor-provided patches without delay. Network segmentation should be enforced to restrict access to the Endpoint Manager interfaces to trusted administrative networks only. Implement strict firewall rules and VPN requirements for remote access to management consoles. Monitor logs for unusual authentication attempts or access patterns indicative of exploitation attempts. Employ multi-factor authentication (MFA) where possible to add an additional layer of security, even if the vulnerability bypasses authentication, to limit impact. Conduct regular vulnerability scans and penetration tests focusing on management interfaces. Educate IT and security teams about this specific threat to ensure rapid detection and response. Consider deploying endpoint detection and response (EDR) solutions to identify suspicious lateral movement or credential misuse post-exploitation.
Description
It also fixed a high-severity authentication bypass that could be exploited remotely without authentication to obtain credentials. The post Ivanti Patches Endpoint Manager Vulnerabilities Disclosed in October 2025 appeared first on SecurityWeek .