CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“4 of 4 advisories (Page 1/1)
CVE-2026-13409.8/CRITICALEPSS 98.6%CISA KEV
2026-01-29

Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote Code Execution Vulnerability Advisory (CVE-2026-1340)

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM) affected versions

[Impact] Unauthenticated attackers can execute arbitrary code remotely, potentially leading to full system compromise

[Mitigation] Apply the official security patches immediately and restrict access to exposed management interfaces

CVE-2026-12819.8/CRITICALEPSS 98.7%CISA KEV
2026-01-29

Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote Code Execution Vulnerability Advisory (CVE-2026-1281)

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM)

[Impact] Unauthenticated remote attackers can inject and execute arbitrary code, leading to full system compromise

[Mitigation] Apply the official security patches immediately and restrict access to the management interfaces

CVE-2023-350829.8/CRITICALEPSS 100.0%CISA KEV
2023-08-15

Ivanti EPMM (formerly MobileIron Core) Authentication Bypass and Remote Code Execution Vulnerability (CVE-2023-35082) Urgent Security Advisory

[Affected Scope] Ivanti EPMM (Endpoint Manager Mobile) 11.10 and older, and MobileIron Core 11.2 and older

[Impact] Unauthenticated remote attackers can bypass authentication to access restricted API endpoints, compromise sensitive data, or execute arbitrary commands

[Mitigation] Immediately upgrade to the latest supported release and restrict external access to administrative API endpoints

CVE-2023-350789.8/CRITICALEPSS 100.0%CISA KEV
2023-07-25

Ivanti EPMM (Endpoint Manager Mobile) Authentication Bypass and Remote API Access Vulnerability Advisory (CVE-2023-35078)

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM, formerly MobileIron Core) versions 11.4, 11.10, 11.11, and all older/supported releases

[Impact] Unauthenticated remote attackers can bypass authentication to access restricted API endpoints, allowing them to harvest sensitive personally identifiable information (PII) or create unauthorized administrative accounts

[Mitigation] Immediately apply the official security patches or upgrade to Ivanti EPMM version 11.12 or higher, and restrict external access to administrative interfaces

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse