Ivanti Endpoint Manager Mobile vulnerabilities
4 known CVE vulnerabilities in Ivanti Endpoint Manager Mobile, translated and rated.
- CVE-2026-1281CriticalActively exploited
Code injection vulnerability in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
- CVE-2025-4428HighActively exploited
Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.
- CVE-2025-4427MediumActively exploited
An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.
- CVE-2026-18851High
Missing authorization in Ivanti Endpoint Manager Mobile before versions 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS