Volerion logoVolerion
Volerion logoVolerion

Actively Exploited in the Wild

This vulnerability is being actively exploited in the wild.

Ivanti Endpoint Manager Mobile Improper Input Validation Vulnerability Allowing Remote Code Execution

Vulnerability

A vulnerability allowing remote code execution has been identified in Ivanti Endpoint Manager Mobile (EPMM) versions prior to 12.6.1.1, 12.7.0.1, and 12.8.0.1. This vulnerability arises from improper input validation, which allows a remotely authenticated user with administrative access to execute arbitrary code on the server.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected server.

Remediation

Users can update to Ivanti Endpoint Manager Mobile versions 12.6.1.1, 12.7.0.1, or 12.8.0.1, all of which are available through the Ivanti Download Portal (login required).

Added: May 7, 2026, 4:22 PM
Updated: May 7, 2026, 4:45 PM

Vulnerability Rating

Custom Algorithm
spread
3.4
impact
10.0
exploitability
6.7
remediation
7.9
relevance
7.7
threat
8.1
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.