Ivanti Releases Updates to Address Actively Exploited Vulnerability in Endpoint Manager Mobile
NEOSEC enrichment — no mirror of the original source
On Thursday, May 7, Ivanti released updates to address five high-severity vulnerabilities in on-premises Ivanti Endpoint Manager Mobile (EPMM). Ivanti says that one of the flaws, CVE-2026-6973, is being actively exploited. The vulnerability
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-5787An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate re…
- CVE-2026-5788Eine unzureichende Zugriffskontrolle in Ivanti EPMM vor den Versionen 12.
- CVE-2026-5786Eine Schwachstelle mit unzureichender Zugriffskontrolle in Ivanti EPMM vor den Versionen 12.
- CVE-2026-6973An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access …
- CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
- CVE-2026-5787Eine unzureichende Zertifikat-Validierung in Ivanti EPMM vor den Versionen 12.
- CVE-2026-5786An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain admin…
- CVE-2026-7821Unzureichende Zertifikat-Validierung in Ivanti EPMM vor den Versionen 12.
- CVE-2026-7821Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to enroll a device b…
- CVE-2026-5788An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods.
Affected vendors and products
More on Releases
Other advisories
- Not ratedosv:CLEANSTART-2025-OK79065Change #4777 (introduced in October 2017) introduced an unforeseen issue in releases which were issued after that date, affecting which clients are permitted to make recursive queries to a BIND nam...
- Not ratedosv:RUSTSEC-2026-0434`ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)
- Not ratedosv:RUSTSEC-2026-0427`sn-releases`: `extract_release_archive` writes archive entries without a path-traversal check (zip-slip)
- CriticalCVE-2026-106071Node2Shell / HTTP2Shell: Brotli RCE (CVE-2026-111497) in Node.js, Python, Envoy and Istio + Node.js October releases
- Not ratedosv:CVE-2026-94018NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path
- Criticalpwn_watch:ovhcloud-cli-github-infostealerOVHcloud CLI releases backdoored on GitHub
- HighCVE-2026-105267Gitea tag delete route deletes releases without release permission
- Not ratedosv:CVE-2026-105267Gitea tag delete route deletes releases without release permission
Other news entries
- Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing MalwareNewsThe Hacker News
- OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement'NewsThe Register — Security
- Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for TestingNewsThe Hacker News
- Microsoft releases Windows OOB updates to distrust eMudhra certificatesNewsBleepingComputer
- Microsoft releases out-of-band Windows fixes with certificate updatesNewsThe Register — Security
- Microsoft releases emergency .NET security fixes for Google Brotli bugNewsThe Register — Security
- Microsoft releases emergency .NET patches for critical Brotli flawNewsBleepingComputer
- Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token BalancesNewsThe Hacker News
Source: https://www.bleepingcomputer.com/
ID