CVE WATCH / VULNERABILITY DETAIL
CVE-2026-105813
MEDIUMCVSS 6.3NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-125754 HIGH 7.1
- CVE-2026-125753 MEDIUM 5.9
- CVE-2026-125747 MEDIUM 5.4
- CVE-2026-124038 LOW 2.3
- CVE-2026-123181 MEDIUM 5.5
- CVE-2026-123179 MEDIUM 5.5
- CVE-2026-121683 CRITICAL 9.4
- CVE-2026-121653 CRITICAL 9.8
- CVE-2026-111256
- CVE-2026-111250