Detections
Analytics
CVE-2025-10918
high
Description
Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk
References
https://www.securityweek.com/high-severity-vulnerabilities-patched-by-ivanti-and-zoom/
https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2025-for-EPM-2024?language=en_US