Ivanti Endpoint Manager Mobile

7 known vulnerabilities in Ivanti Endpoint Manager Mobile, 3 critical, 6 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2026-6973 CVSS 7.2 high · actively exploited Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
  • CVE-2026-1340 CVSS 9.8 critical · actively exploited Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  • CVE-2026-1281 CVSS 9.8 critical · actively exploited Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  • CVE-2025-4428 CVSS 8.8 high · actively exploited Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  • CVE-2025-4427 CVSS 7.5 high · actively exploited Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
  • CVE-2023-35078 CVSS 9.8 critical · actively exploited Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Latest vulnerabilities

  • CVE-2026-18851 CVSS 8.8 high Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated…
  • CVE-2026-6973 CVSS 7.2 high · actively exploited Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
  • CVE-2026-1340 CVSS 9.8 critical · actively exploited Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  • CVE-2026-1281 CVSS 9.8 critical · actively exploited Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  • CVE-2025-4428 CVSS 8.8 high · actively exploited Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  • CVE-2025-4427 CVSS 7.5 high · actively exploited Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
  • CVE-2023-35078 CVSS 9.8 critical · actively exploited Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability