Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/04/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| endpoint manager mobile | ≤ 12.7.0.0 |
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free