CVE-2026-7821

Published: May 7, 2026Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to enroll a device belonging to a restricted set of unenrolled devices, leading to information disclosure about EPMM appliance and impacting on the integrity of the newly enrolled device identity.

Affected (3)

Products: Ivanti: Endpoint Manager Mobile

1 product

Endpoint Manager Mobile

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ivanti Endpoint Manager Mobile	Before 12.6.1.1
Ivanti Endpoint Manager Mobile	Version 12.7.0.0
Ivanti Endpoint Manager Mobile	Version 12.8.0.0

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (1)

https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs?language=en_US

Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

PatchVendor Advisory

Timeline

No history available yet.