Ivanti: >> Endpoint Manager Mobile >> 12.6.1.1 Security Vulnerabilities
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin.
CVSS Score
8.8
EPSS Score
0.01
Published
2026-09-08
CVE-2026-1340
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
Known exploited
CVSS Score
9.8
EPSS Score
0.862
Published
2026-01-29