EM
Mobile
Endpoint Manager Mobile
On CISA KEVExploited in the wildRansomware-linked
32
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 17Medium 5Low 0
Watch
Add Endpoint Manager Mobile to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1340 In wildKEV | 9.8 | Jan 29 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Affected: through 12.7.0.0 |
| CVE-2026-1281 In wildKEV | 9.8 | Jan 29 | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Affected: through 12.5.0.0; 12.5.1.0; 12.6.0.0; 12.6.1.0; 12.7.0.0 |
| CVE-2023-35082 RansomwareIn wildKEV | 9.8 | Aug 15 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability Affected: 11.10 through 11.10 |
| CVE-2023-35078 RansomwareIn wildKEV | 9.8 | Jul 25 | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Affected: before 11.8.1.1; 11.9.0 before 11.9.1.1; 11.10 before 11.10.0.2 |
| CVE-2026-5788 | 9.8 | May 7 | An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods Affected: before 12.6.1.1; 12.7.0.0; 12.8.0.0 |
| CVE-2024-36130 | 9.8 | Aug 7 | An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker within the network to execute arbitrary commands on the… Affected: before 12.1.0.1 |
| CVE-2023-39335 | 9.8 | Nov 15 | A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the… Affected: before 11.9.0; 11.10.0 before 11.10.0.4; 11.11.0 before 11.11.0.2 |
| CVE-2026-5787 | 9.1 | May 7 | An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts… Affected: before 12.6.1.1; 12.7.0.0; 12.8.0.0 |
| CVE-2026-7821 | 9.1 | May 7 | Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to enroll a device belonging to a… Affected: before 12.6.1.1; 12.7.0.0; 12.8.0.0 |
| CVE-2023-39337 | 9.1 | Nov 15 | A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive… Affected: through 11.9.0; 11.10.0 before 11.10.0.4; 11.11.0 before 11.11.0.2 |
Showing 10