ZDI-26-080: Ivanti Endpoint Manager AuthHelper Authentication Bypass Vulnerability
Published Feb 12, 2026
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Endpoint Manager. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.6. The following CVEs are assigned: CVE-2026-1603.
Affected Software
1 affected component
Ivanti Ivanti Endpoint Manager
Event History
Feb 12, 2026
Advisory Published
via ZDI·06:00 AM
Data Sourced
via ZDI·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-26-080?
The severity of ZDI-26-080 is rated at 8.6 according to the CVSS system.
2
How do I fix ZDI-26-080?
To mitigate the ZDI-26-080 vulnerability, immediately apply the latest security patches provided by Ivanti for the Endpoint Manager.
3
What does ZDI-26-080 allow an attacker to do?
ZDI-26-080 allows remote attackers to bypass authentication on affected installations of Ivanti Endpoint Manager.
4
Is authentication required to exploit ZDI-26-080?
No, authentication is not required to exploit the ZDI-26-080 vulnerability.
5
Which software is affected by ZDI-26-080?
The software affected by ZDI-26-080 is Ivanti Endpoint Manager.