/Vulnerability Library

Ivanti EPMM < 12.8.0.0 - Remote Code Execution

CVE-2026-1340
Verified

Description

Ivanti Endpoint Manager Mobile contains a code injection vulnerability allowing unauthenticated attackers to execute arbitrary code remotely, exploit requires no authentication.

Severity

Critical

CVSS Score

9.8

Exploit Probability

99%

Affected Product

endpoint_manager_mobile

Published Date

September 8, 2026

Template Author

0x_akoko

CVE-2026-1340.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2026-1340
CWE ID:
cwe-94

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMMhttps://nvd.nist.gov/vuln/detail/CVE-2026-1340

Remediation Steps

Update to the latest version of Ivanti Endpoint Manager Mobile.