Ivanti EPMM 5 High-Severity Vulnerabilities (CVE-2026-5786/6973) and Patch Guide

Ivanti Endpoint Manager Mobile (EPMM) Security Vulnerability Summary Vulnerability Overview Ivanti has released security updates for Ivanti Endpoint Manager Mobile (EPMM) addressing 5 high-severity vulnerabilities. CVE-2026-6973: Has a very limited number of known exploitation cases and requires administrator privileges. Other Vulnerabilities: CVE-2026-5786, CVE-2026-5787, CVE-2026-5788, and CVE-2026-7821 had no known exploitation cases at the time of public disclosure. Impact Scope Affected Product: Ivanti Endpoint Manager Mobile (EPMM) Affected Versions: 12.8.0.0 and earlier 12.7.0.1 and earlier 12.6.1.1 and earlier Vulnerability Details: CVE-2026-5786 (CVSS 8.9): Improper certificate validation allows a remote unauthenticated attacker to register trusted devices and obtain valid certificates. CVE-2026-5787 (CVSS 7.0): Improper access control allows a remote unauthenticated attacker to invoke arbitrary methods. CVE-2026-5788 (CVSS 7.2): Improper input validation allows a remote unauthenticated user to achieve remote code execution. CVE-2026-6973 (CVSS 7.4): Improper certificate validation allows a remote unauthenticated attacker to register restricted devices, leading to information disclosure. CVE-2026-7821 (CVSS 7.4): Improper certificate validation allows a remote unauthenticated attacker to register restricted devices, compromising device identity integrity. Remediation Customers are advised to update EPMM to the following latest versions: 12.6.1.1 12.7.0.1 12.8.0.1 Update Links (Login Required): 12.6.1.1: New Instance: Update Existing Instance: 12.7.0.1: New Instance: Update Existing Instance: 12.8.0.1: New Instance: Update Existing Instance: Note**: The above versions also include fixes for CVE-2026-1281 and CVE-2026-1340. If customers applied the RPM package in January 2026, no further action is required.

Goal Reached Thanks to every supporter — we hit 100%!

Ivanti EPMM 5 High-Severity Vulnerabilities (CVE-2026-5786/6973) and Patch Guide

More from this source