Ivanti Endpoint Manager Mobile

• CVE-2026-6973 High 7.2 Exploited An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution. 34.5%
• CVE-2026-1340 Critical 9.8 Exploited A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. 98.6%
• CVE-2026-1281 Critical 9.8 Exploited A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. 98.7%
• CVE-2025-4428 High 7.2 Exploited Remote Code Execution 88.0%
• CVE-2025-4427 Medium 5.3 Exploited Authentication Bypass 99.9%
• CVE-2023-35078 Critical 10.0 Exploited An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication. 100.0%
• CVE-2026-18851 High 8.8 Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin. 1.2%
• CVE-2026-10727 High 7.2 An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root 12.9%
• CVE-2026-5787 High 8.9 An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-s 0.7%
• CVE-2026-5788 High 7.0 An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods. 0.8%
• CVE-2026-7821 High 7.4 Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to enroll a device belonging to a restricted set of unenrolled 0.5%
• CVE-2026-5786 High 8.8 An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access. 11.2%
• CVE-2025-10986 Medium 4.7 Path traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to write data in unintended locations on d 0.6%
• CVE-2025-10985 High 7.2 OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution. 21.3%
• CVE-2025-10243 High 7.2 OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution. 21.3%
• CVE-2025-10242 High 7.2 OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution. 21.3%
• CVE-2025-6771 High 7.2 OS command injection in Ivanti Endpoint Manager 23.0%
• CVE-2025-6770 High 7.2 OS command injection in Ivanti Endpoint Manager 19.5%
• CVE-2024-7612 High 8.8 Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application components. 0.2%