{"vulnerability": "CVE-2026-18129", "sightings": [{"uuid": "f6e5832d-7a37-4b72-9b9e-5224db83385c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4rb7ba72o", "content": "\ud83d\udd17 CVE : CVE-2026-18125, CVE-2026-18127, CVE-2026-18129", "creation_timestamp": "2026-08-12T12:25:23.959688Z"}, {"uuid": "fcd5c0a2-66ad-4d16-b0e9-5e7017fd1d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117082628331667308", "content": "Tracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections. https://www.securityweek.com/ivanti-epm-update-patches-remotely-exploitable-flaws/", "creation_timestamp": "2026-08-12T12:52:08.987183Z"}, {"uuid": "06f0667d-bb15-481e-9cd3-64d2a4f04884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3msv6bcphis2x", "content": "Tracked as CVE-2026-18129, the first is described as a cleartext transmission of sensitive information issue that can be exploited by an attacker in a man-in-the-middle (MitM) position to leak credentials for external SQL connections. www.securityweek.com/ivanti-epm-u...", "creation_timestamp": "2026-08-12T12:52:17.325200Z"}, {"uuid": "a605309f-fd0d-4df5-9dc0-dabd91521d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1007", "content": "", "creation_timestamp": "2026-08-13T09:48:16.847930Z"}, {"uuid": "fbbadb33-14c3-4631-9d51-63106a7e4315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2014", "content": "", "creation_timestamp": "2026-08-13T10:21:38.295338Z"}, {"uuid": "9d3bfa8e-1f62-4de7-befb-ecc583972cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18129", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mssv2hhekn2b", "content": "Ivanti's Endpoint Manager has three new high-severity flaws, all fixed in the 2024 SU7 update.\n\nOne leaks stored database passwords, one lets a user rewrite session recordings, one crashes the agents.\n\nNot exploited yet. Patch now. (CVE-2026-18129)", "creation_timestamp": "2026-08-11T15:02:03.538441Z"}]}