CVE-2026-1281

Critical

Published: 29/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Code injection vulnerability in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

Risk Assessment

An attacker can remotely execute arbitrary code without authentication, potentially leading to full compromise of the mobile device management system.

Recommendation

It is recommended to immediately update Ivanti Endpoint Manager Mobile to the latest version that includes security fixes. Also, restrict network access to the system.

Original NVD description (English source)

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.