Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 29/01/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| endpoint manager mobile | = 12.5.1.0= 12.6.0.0= 12.6.1.0= 12.7.0.0≤ 12.5.0.0 |
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free