Live · 98 sources · updated 9m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 2 sources

CVE-2026-105813

CVSS 6.3

Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's…

Vendor
Ivanti
Product
User Workspace Manager
CVSS v3.1
6.3 AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-312

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. Ivanti advisory Ivanti

    November 2026 Security Update

    Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security…

  2. CVE NVD

    Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's…

    Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help