CVE-2025-10918

HIGH 7.1CVE-2025-10918 · Published 11/11/2025 · updated 18/10/2026

In short

CVE-2025-10918 is a HIGH (CVSS 7.1) vulnerability affecting endpoint manager (ivanti).
Chance of exploitation in the next 30 days (EPSS): 0.24%, higher than 15.1% of all vulnerabilities.
Fix: update to 2024 or later.

Package	Affected versions	Patched versions
endpoint manager ivanti	`= 2024< 2024`	`2024`

Description

Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk

References

forums.ivanti.com/s/article/Security-Advisory-EPM-November-2025-for-EPM-2024 · Vendor Advisory

More vulnerabilities in endpoint manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

endpoint manager

ivanti

= 2024< 2024

2024

More vulnerabilities in endpoint manager

See all →