Cryptographic Signature Validation Flaw in Ivanti Endpoint Manager

CVE-2025-13662

What is CVE-2025-13662?

A vulnerability in Ivanti Endpoint Manager’s patch management component has been identified, allowing remote, unauthenticated attackers to potentially execute arbitrary code by exploiting improper verification of cryptographic signatures. This issue emphasizes the need for rigorous testing and verification processes in software security, as user interaction is mandated for exploitation. Organizations using affected versions should prioritize upgrading to secure versions promptly.

References