PT-2026-5358 · Ivanti · Ivanti Endpoint Manager Mobile

Published 2026-01-29 · Updated 2026-02-02 · CVE-2026-1340

Positive Technologies · (AI Summary)

CVSS v3.1

9.8

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager Mobile versions 12.7.x and earlier

Description A code injection exists in Ivanti Endpoint Manager Mobile that allows attackers to achieve unauthenticated remote code execution. This means attackers can run arbitrary code without needing to log in. The issue allows for the execution of code on affected systems.

Recommendations Update Ivanti Endpoint Manager Mobile to a version newer than 12.7.x.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-1340

Affected Products

Ivanti Endpoint Manager Mobile

References · 87

• https://nvd.nist.gov/vuln/detail/CVE-2026-1340 · Security Note
• https://reddit.com/r/TechNadu/comments/1qr4t0x/ivanti_has_confirmed_active_exploitation_of_two · Reddit Post
• https://twitter.com/rapid7/status/2017272761601647091 · Twitter Post
• https://twitter.com/WhichbufferArda/status/2016998576417624071 · Twitter Post
• https://t.me/RNetsec/22502 · Telegram Post
• https://reddit.com/r/SecOpsDaily/comments/1qrb5sd/someone_knows_bash_far_too_well_and_we_love_it · Reddit Post
• https://twitter.com/TweetThreatNews/status/2017447828864282753 · Twitter Post
• https://twitter.com/transilienceai/status/2017840591858528417 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1qqo3cr/ivanti_warns_of_two_epmm_flaws_exploited_in · Reddit Post
• https://reddit.com/r/pwnhub/comments/1qr9wbl/critical_ivanti_epmm_zeroday_exploits_demand · Reddit Post
• https://twitter.com/CorksonCash/status/2017795471268581625 · Twitter Post
• https://twitter.com/secharvesterx/status/2017296913691730252 · Twitter Post
• https://twitter.com/hackeraffairs/status/2017155470281363680 · Twitter Post
• https://twitter.com/CVEnew/status/2016992608204312596 · Twitter Post
• https://t.me/cveNotify/150392 · Telegram Post