What is GHSA-m3fh-fwx3-wq23?

GHSA-m3fh-fwx3-wq23 is a security advisory published by GitHub Security Advisories with Medium severity. Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before...

Which CVE IDs does GHSA-m3fh-fwx3-wq23 cover?

GHSA-m3fh-fwx3-wq23 covers the following CVE IDs: CVE-2026-18128. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m3fh-fwx3-wq23?

GHSA-m3fh-fwx3-wq23 has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

GHSA-m3fh-fwx3-wq23MediumCVSS 6.8

Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before...

Vendor

GitHub Security Advisories

Published

November 10, 2026

Last Modified

November 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-18128 →

📋 Description

Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to in a MITM position to read and modify HTTP traffic.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-18128
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-November-2026?language=en_US
https://github.com/advisories/GHSA-m3fh-fwx3-wq23