Veille CVE

Recherche « Ivanti Endpoint Manager Mobile »

11 CVE

Critique 6 Élevée 5 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ivanti Endpoint Manager Mobile » ✕
  1. CVE-2026-18851 8.8 Élevée

    Ivanti Endpoint Manager Mobile

    Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin.

  2. CVE-2026-10727 7.2 Élevée

    Ivanti Endpoint Manager Mobile

    An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root

  3. CVE-2026-7821 9.1 Critique

    Ivanti Endpoint Manager Mobile

    Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to enroll a device belonging to a restricted set of unenrolled devices, leading to information disclosure about EPMM appliance and impacting on the integrity of the newly enrolled device identity.

  4. CVE-2026-6973 7.2 Élevée Exploitée

    Ivanti Endpoint Manager Mobile

    An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.

  5. CVE-2026-5788 9.8 Critique

    Ivanti Endpoint Manager Mobile

    An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods.

  6. CVE-2026-5787 9.1 Critique

    Ivanti Endpoint Manager Mobile

    An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates.

  7. CVE-2026-5786 8.8 Élevée

    Ivanti Endpoint Manager Mobile

    An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access.

  8. CVE-2026-1340 9.8 Critique Exploitée

    Ivanti Endpoint Manager Mobile

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

  9. CVE-2023-35082 9.8 Critique Exploitée Rançongiciel

    Ivanti EPMM · Ivanti endpoint manager mobile

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.

  10. CVE-2023-35081 7.2 Élevée Exploitée

    Ivanti EPMM · Ivanti endpoint manager mobile

    A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.

  11. CVE-2023-35078 9.8 Critique Exploitée Rançongiciel

    Ivanti Endpoint Manager Mobile · ivanti endpoint_manager_mobile

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.