Advisories · Technology

Ivanti Endpoint Manager Mobile.

Every CVE that names Ivanti Endpoint Manager Mobile among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-83528 CVE record

CVSS 4.9 Medium

Exposure of personal information in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Information disclosure
Not analysed yet 10 Nov 2026
CVE-2026-107405 CVE record

CVSS 5.5 Medium

An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to trigger a denial of service.
- Ivanti Endpoint Manager Mobile
- CWE-749
Not analysed yet 10 Nov 2026
CVE-2026-107404 CVE record

CVSS 4.9 Medium

Argument injection in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Command injection
Not analysed yet 10 Nov 2026
CVE-2026-105427 CVE record

CVSS 4.9 Medium

Improper input validation in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- CWE-20
Not analysed yet 10 Nov 2026
CVE-2026-105426 CVE record

CVSS 6.7 Medium

Improper input validation in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- CWE-20
Not analysed yet 10 Nov 2026
CVE-2026-105425 CVE record

CVSS 7.2 High

OS command injection in Ivanti Sentry and others
- Ivanti Sentry
- Ivanti Endpoint Manager Mobile
- Command injection
Not analysed yet 10 Nov 2026
CVE-2026-18851 CVE record

CVSS 8.8 High

Missing authorization in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-10727 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

OS command injection in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Command injection
Not analysed yet 9 Jun 2026
CVE-2026-5787 CVE record

CVSS 8.9 High

Improper certificate validation in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Weak cryptography or TLS
Not analysed yet 7 May 2026
CVE-2026-5788 CVE record

CVSS 7.0 High

Improper access control in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Broken access control
Not analysed yet 7 May 2026
CVE-2026-7821 CVE record

CVSS 7.4 High

Improper certificate validation in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Weak cryptography or TLS
Not analysed yet 7 May 2026
CVE-2026-6973 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

Improper input validation in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- CWE-20
Not analysed yet 7 May 2026
CVE-2026-5786 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Improper access control in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Broken access control
Not analysed yet 7 May 2026
CVE-2026-1340 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Code injection in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Code injection
Not analysed yet 29 Jan 2026
CVE-2026-1281 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Code injection in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Code injection
Not analysed yet 29 Jan 2026
CVE-2025-10986 CVE record

CVSS 4.7 Medium

Path traversal in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Path traversal
Not analysed yet 14 Oct 2025
CVE-2025-10985 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

OS command injection in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Command injection
Not analysed yet 14 Oct 2025
CVE-2025-10243 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

OS command injection in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Command injection
Not analysed yet 14 Oct 2025
CVE-2025-10242 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

OS command injection in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Command injection
Not analysed yet 14 Oct 2025
CVE-2025-6771 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

OS command injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager Mobile
- Command injection
Not analysed yet 8 Jul 2025
CVE-2025-6770 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

OS command injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager Mobile
- Command injection
Not analysed yet 8 Jul 2025
CVE-2025-4428 CVE record

CVSS 7.2 HighCritical · KEV, CVSS 7+ and EPSSKEV

Remote Code Execution
- Ivanti Endpoint Manager Mobile
- Code injection
Not analysed yet 13 May 2025
CVE-2025-4427 CVE record

CVSS 5.3 MediumCritical · KEVKEV

Authentication Bypass
- Ivanti Endpoint Manager Mobile
- Authentication bypass
Not analysed yet 13 May 2025
CVE-2024-7612 CVE record

CVSS 8.8 High

Incorrect permission assignment in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Broken access control
Not analysed yet 8 Oct 2024
CVE-2023-35078 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Improper authentication in Ivanti Endpoint Manager Mobile
- Ivanti Endpoint Manager Mobile
- Authentication bypass
Not analysed yet 25 Jul 2023