A vulnerability was found in Ivanti Endpoint Manager up to 2024 SU3. It has been classified as critical. Impacted is an unknown function. Performing manipulation results in incorrect default permissions.
This vulnerability is known as CVE-2025-10918. Attacking locally is a requirement. No exploit is available.
Upgrading the affected component is recommended.