Skip to contentIvanti Endpoint Manager vulnerabilities
- ivanti endpoint manager mobileExposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote...CVE-2026-835284.9 Medium
- ivanti endpoint manager mobileAn exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3...CVE-2026-1074055.5 Medium
- ivanti endpoint manager mobileArgument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a...CVE-2026-1074044.9 Medium
- ivanti endpoint manager mobileImproper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows...CVE-2026-1054274.9 Medium
- ivanti endpoint manager mobileImproper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows...CVE-2026-1054266.7 Medium
- ivanti sentry, endpoint manager mobile +1 moreOS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in...CVE-2026-105425Public exploit7.2 High
- ivanti endpoint managerCleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before...CVE-2026-181286.8 Medium
- ivanti endpoint managerSQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote...CVE-2026-121653Public exploit9.8 Critical
- ivanti endpoint manager mobileMissing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and...CVE-2026-188518.8 High
- ivanti endpoint managerCleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before...CVE-2026-181298.1 High
- ivanti endpoint managerExternal control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7...CVE-2026-181277.7 High
- ivanti endpoint managerAn out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a...CVE-2026-181257.5 High
- ivanti endpoint manager mobileAn OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2...CVE-2026-10727EPSS 12.9%7.2 High
- ivanti endpoint managerSQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a...CVE-2026-81118.8 High
- ivanti endpoint managerIncorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6...CVE-2026-81107.8 High
- ivanti endpoint managerAn exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6...CVE-2026-81096.5 Medium
- ivanti endpoint manager mobileAn Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0...CVE-2026-57878.9 High
- ivanti endpoint manager mobileAn Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows...CVE-2026-57887.0 High
- ivanti endpoint manager mobileImproper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1...CVE-2026-78217.4 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreAn Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1...CVE-2026-6973In KEVEPSS 34.5%7.2 High
- ivanti endpoint manager mobileAn Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and...CVE-2026-5786EPSS 11.2%8.8 High
- ivanti endpoint manager, endpoint manager (epm) +1 moreAn authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote...CVE-2026-1603In KEVEPSS 88.3%8.6 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated...CVE-2026-16026.5 Medium
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreA code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated...CVE-2026-1340In KEVPublic exploitEPSS 98.6%9.8 Critical
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreA code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated...CVE-2026-1281In KEVPublic exploitEPSS 98.7%9.8 Critical
- ivanti endpoint managerImproper verification of cryptographic signatures in the patch management component of Ivanti...CVE-2025-136627.8 High
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote...CVE-2025-136617.1 High
- ivanti endpoint managerImproper control of dynamically managed code resources in Ivanti Endpoint Manager prior to...CVE-2025-136598.8 High
- ivanti endpoint managerStored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote...CVE-2025-10573EPSS 34.1%9.6 Critical
- ivanti endpoint managerInsecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4...CVE-2025-109187.1 High
- ivanti endpoint manager mobilePath traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4...CVE-2025-109864.7 Medium
- ivanti endpoint manager mobileOS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12...CVE-2025-10985EPSS 21.3%7.2 High
- ivanti endpoint manager mobileOS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12...CVE-2025-10243EPSS 21.3%7.2 High
- ivanti endpoint manager mobileOS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12...CVE-2025-10242EPSS 21.3%7.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623846.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623866.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623836.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623916.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623856.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623876.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623886.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623896.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623906.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623926.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-116236.5 Medium
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager allows a remote unauthenticated attacker to achieve...CVE-2025-9713EPSS 16.1%8.8 High
- ivanti endpoint managerInsecure deserialization in Ivanti Endpoint Manager allows a local authenticated attacker to...CVE-2025-116227.8 High
- ivanti endpoint managerInsufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 Security Update 1 and...CVE-2025-9872EPSS 17.0%8.8 High
- ivanti endpoint managerInsufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 Security Update 1 and...CVE-2025-9712EPSS 25.6%8.8 High
- ivanti endpoint manager mobileOS command injection in Ivanti Endpoint ManagerCVE-2025-6771EPSS 23.0%7.2 High
- Show olderLoading…