{"vulnerability": "cve-2026-1812", "sightings": [{"uuid": "75d6c265-1d31-4cdb-bcda-275a0a0ef8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msujt4lqup2r", "content": "CVE-2026-18125 is trending. Hype score 4, currently #7 on cvemon.\n\nAn out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-18125", "creation_timestamp": "2026-08-12T06:46:25.131584Z"}, {"uuid": "37b3b63f-6dcc-4558-878c-cbf7a5e70661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-21T23:00:06.240648Z"}, {"uuid": "1015f52b-56cd-4fa6-aa7f-67af18a53e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-21T23:00:06.284451Z"}, {"uuid": "b9b02627-e979-4f41-987d-bfea519502fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4rb7ba72o", "content": "\ud83d\udd17 CVE : CVE-2026-18125, CVE-2026-18127, CVE-2026-18129", "creation_timestamp": "2026-08-12T12:25:23.859214Z"}, {"uuid": "882dc4c0-e97c-4a8e-bffb-1b9deb905d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18127", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4rb7ba72o", "content": "\ud83d\udd17 CVE : CVE-2026-18125, CVE-2026-18127, CVE-2026-18129", "creation_timestamp": "2026-08-12T12:25:23.915682Z"}, {"uuid": "f6e5832d-7a37-4b72-9b9e-5224db83385c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4rb7ba72o", "content": "\ud83d\udd17 CVE : CVE-2026-18125, CVE-2026-18127, CVE-2026-18129", "creation_timestamp": "2026-08-12T12:25:23.959688Z"}, {"uuid": "fcd5c0a2-66ad-4d16-b0e9-5e7017fd1d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117082628331667308", "content": "Tracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections. https://www.securityweek.com/ivanti-epm-update-patches-remotely-exploitable-flaws/", "creation_timestamp": "2026-08-12T12:52:08.987183Z"}, {"uuid": "06f0667d-bb15-481e-9cd3-64d2a4f04884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3msv6bcphis2x", "content": "Tracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections. www.securityweek.com/ivanti-epm-u...", "creation_timestamp": "2026-08-12T12:52:17.325200Z"}, {"uuid": "84a5d941-da05-4b5e-89c6-85da5d3a6b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-22T00:00:09.993201Z"}, {"uuid": "f314625c-b338-4a4a-809f-b98ab23f87e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-22T00:00:10.026759Z"}, {"uuid": "5d26d970-19dc-4970-adc2-8b2bb6059da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1007", "content": "", "creation_timestamp": "2026-08-13T09:48:11.920187Z"}, {"uuid": "a605309f-fd0d-4df5-9dc0-dabd91521d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1007", "content": "", "creation_timestamp": "2026-08-13T09:48:16.847930Z"}, {"uuid": "21c11921-949e-4043-8b44-7519c1e2d2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18127", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1007", "content": "", "creation_timestamp": "2026-08-13T09:48:14.384380Z"}, {"uuid": "876b17ac-d36b-4630-ae17-2d613e1320b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18127", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2014", "content": "", "creation_timestamp": "2026-08-13T10:21:36.046745Z"}, {"uuid": "9e384b5a-5046-4b4c-adb1-22b823d0b49d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2014", "content": "", "creation_timestamp": "2026-08-13T10:21:33.773610Z"}, {"uuid": "fbbadb33-14c3-4631-9d51-63106a7e4315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2014", "content": "", "creation_timestamp": "2026-08-13T10:21:38.295338Z"}, {"uuid": "9d3bfa8e-1f62-4de7-befb-ecc583972cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mssv2hhekn2b", "content": "Ivanti's Endpoint Manager has three new high-severity flaws, all fixed in the 2024 SU7 update.\n\nOne leaks stored database passwords, one lets a user rewrite session recordings, one crashes the agents.\n\nNot exploited yet. Patch now. (CVE-2026-18129)", "creation_timestamp": "2026-08-11T15:02:03.538441Z"}, {"uuid": "480b3d0d-e73e-40c7-8fa5-7b245be1cf58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18125", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-23T00:00:47.755803Z"}, {"uuid": "d388f76b-dbbd-4681-b2c0-f113687bc7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://t.me/pphm_HackerNews/2594", "content": "\ud83d\udd34 Ivanti EPM Update Patches Remotely Exploitable Flaws\n\nEnterprise software company Ivanti on Tuesday announced patches for four vulnerabilities in Endpoint Manager (EPM) and Neurons for MDM.\n\nThe EPM update addresses three high-severity bugs, including two that could be exploited by remote, unauthenticated attackers.\n\nTracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections.\n\nThe second, CVE-2026-18125, is an out-of-bounds read flaw in the EPM agent that can be triggered to crash an agent service.", "creation_timestamp": "2026-08-23T00:00:47.323110Z"}, {"uuid": "c43990ed-018a-4dc2-8c12-7c422c1bf62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18122", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fcovfqu72nxje", "content": "CVE-2026-18122 - Concrete CMS 9.2.0 to 9.5.2 Express REST API list endpoint exposes restricted Express entries via Missing Authorization\nCVE ID : CVE-2026-18122\n \n Published : Sept. 11, 2026, 5:15 p.m. | 29\u00a0minutes ago\n \n Description : Concrete CMS 9.2.0 to 9.5.2 Express REST ...", "creation_timestamp": "2026-09-11T17:56:00.673409Z"}, {"uuid": "a9c6af31-6d12-43d6-8837-7f52d0bc5853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvgffsytrk2d", "content": "\u300cIvanti EPM\u300d\u3084\u300cIvanti Neurons for MDM\u300d\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u3092\u5b9f\u65bd\n\nIvanti\u306f2026\u5e748\u670811\u65e5\u3001\u300cIvanti Endpoint Manager\uff08EPM\uff09\u300d\u3084\u300cIvanti Neurons for MDM\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u305f\u3002\n\n...\n\n\u300cEPM\u300d\u3067\u306f\u91cd\u8981\u5ea6\u304c\u300c\u9ad8\uff08High\uff09\u300d\u3068\u3055\u308c\u308b3\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u5fdc\u3057\u305f\u3002SQL\u306e\u5916\u90e8\u63a5\u7d9a\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u60c5\u5831\u3092\u5e73\u6587\u3067\u9001\u4fe1\u3059\u308b\u300cCVE-2026-18129\u300d\u304c\u5224\u660e\u3057\u305f\u3002\n\n\u307e\u305f\u4f4e\u6a29\u9650\u3092\u6301\u3064\u5834\u5408\u306b\u5916\u90e8\u304b\u3089\u30d5\u30a1\u30a4\u30eb\u540d\u3092\u5236\u5fa1\u3067\u304d\u308b\u300cCVE-2026-18127\u300d\u304c\u5224\u660e\u3002\u30bb\u30c3\u30b7\u30e7\u30f3\u8a18\u9332\u306e\u4fdd\u5b58\u5148\u3068\u3057\u3066\u69cb\u6210\u3055...", "creation_timestamp": "2026-09-13T20:05:45.304626Z"}, {"uuid": "f7f0e470-6d09-488c-8602-c5dd0885f0de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18127", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvgffsytrk2d", "content": "\u300cIvanti EPM\u300d\u3084\u300cIvanti Neurons for MDM\u300d\u306b\u8106\u5f31\u6027 - \u4fee\u6b63\u3092\u5b9f\u65bd\n\nIvanti\u306f2026\u5e748\u670811\u65e5\u3001\u300cIvanti Endpoint Manager\uff08EPM\uff09\u300d\u3084\u300cIvanti Neurons for MDM\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u305f\u3002\n\n...\n\n\u300cEPM\u300d\u3067\u306f\u91cd\u8981\u5ea6\u304c\u300c\u9ad8\uff08High\uff09\u300d\u3068\u3055\u308c\u308b3\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u5fdc\u3057\u305f\u3002SQL\u306e\u5916\u90e8\u63a5\u7d9a\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u60c5\u5831\u3092\u5e73\u6587\u3067\u9001\u4fe1\u3059\u308b\u300cCVE-2026-18129\u300d\u304c\u5224\u660e\u3057\u305f\u3002\n\n\u307e\u305f\u4f4e\u6a29\u9650\u3092\u6301\u3064\u5834\u5408\u306b\u5916\u90e8\u304b\u3089\u30d5\u30a1\u30a4\u30eb\u540d\u3092\u5236\u5fa1\u3067\u304d\u308b\u300cCVE-2026-18127\u300d\u304c\u5224\u660e\u3002\u30bb\u30c3\u30b7\u30e7\u30f3\u8a18\u9332\u306e\u4fdd\u5b58\u5148\u3068\u3057\u3066\u69cb\u6210\u3055...", "creation_timestamp": "2026-09-13T20:05:45.369896Z"}]}