PT-2026-5358 · Ivanti · Ivanti Endpoint Manager Mobile

Published 2026-01-29 · Updated 2026-03-26 · CVE-2026-1340

Positive Technologies · (AI Summary)

CVSS v2.0

10

Critical

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager Mobile versions prior to 12.7.x

Description A code injection flaw exists in Ivanti Endpoint Manager Mobile, enabling attackers to execute arbitrary code remotely without authentication. The flaw stems from improper code generation management. Exploitation allows a remote attacker to achieve unauthenticated remote code execution (RCE).

Recommendations Versions prior to 12.7.x should be updated.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2026-01123

CVE-2026-1340

Affected Products

Ivanti Endpoint Manager Mobile

References · 167

• https://osv.dev/vulnerability/CVE-2026-1340 · Vendor Advisory
• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01123 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-1340 · Security Note
• https://t.me/defcon_news/133765 · Telegram Post
• https://twitter.com/DarkWebInformer/status/2017315679213408321 · Twitter Post
• https://reddit.com/r/cybersecurityforMSP/comments/1qww0u3/critical_n8n_vulnerability_is_getting_more · Reddit Post
• https://i.redd.it/igf3d7ry0ihg1.jpeg · Reddit Post
• https://twitter.com/arnavsharma/status/2018796377342427504 · Twitter Post
• https://twitter.com/InfosecDotWatch/status/2029716125676638419 · Twitter Post
• https://twitter.com/ThreatSynop/status/2021769168627151028 · Twitter Post
• https://t.me/cveNotify/150387 · Telegram Post
• https://twitter.com/socradar/status/2017127655192076615 · Twitter Post
• https://twitter.com/threatintel/status/2024186387772428537 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1r0t141/european_commission_and_dutch_agencies_victimized · Reddit Post