Actively exploited vulnerabilities affecting Ivanti products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-10520https://wildfortech.com/security#CVE-2026-10520This critical flaw in Ivanti Sentry allows a remote attacker with no credentials to execute commands as root — the highest privilege level on the system. Because Sentry acts as a mobile device management gateway, a full compromise could expose MDM infrastructure and the devices it manages. The risk is highest when the appliance is unmanaged and its interfaces are publicly reachable. Deployments using mTLS with EPMM or restricted HTTPS access through Neurons for MDM have those interfaces shielded from external attackers.Thu, 11 Jun 2026 00:00:00 GMTIvantiSentryhttps://wildfortech.com/security#CVE-2026-6973https://wildfortech.com/security#CVE-2026-6973This vulnerability in Ivanti Endpoint Manager Mobile allows an authenticated administrator-level attacker to remotely execute arbitrary code on the system. While requiring admin credentials raises the bar slightly, compromised admin accounts — through phishing or credential theft — are a realistic threat vector. EPMM is a mobile device management platform, meaning a successful exploit could give attackers control over the MDM infrastructure and, by extension, visibility into or control of managed mobile devices across an organization.Thu, 07 May 2026 00:00:00 GMTIvantiEndpoint Manager Mobile (EPMM)https://wildfortech.com/security#CVE-2026-1340https://wildfortech.com/security#CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) contains a code injection flaw that allows unauthenticated attackers to execute arbitrary code remotely — no credentials required. EPMM is a mobile device management platform, meaning a successful exploit could give attackers control over a system that itself manages and has visibility into an organization's entire mobile device fleet. This makes the blast radius significant, potentially exposing corporate data, configurations, and enrolled devices across the environment.Wed, 08 Apr 2026 00:00:00 GMTIvantiEndpoint Manager Mobile (EPMM)https://wildfortech.com/security#CVE-2026-1603https://wildfortech.com/security#CVE-2026-1603This flaw in Ivanti Endpoint Manager allows a remote attacker with no credentials to bypass authentication via an alternate path or channel and extract stored credential data from the system. Because EPM manages endpoints across an organization, exposed credentials could give attackers a foothold to move laterally or compromise managed devices at scale. No evidence of ransomware exploitation is currently recorded, but credential leakage from an endpoint management platform represents serious organizational risk.Mon, 09 Mar 2026 00:00:00 GMTIvanti Endpoint Manager (EPM)https://wildfortech.com/security#CVE-2026-1281https://wildfortech.com/security#CVE-2026-1281This vulnerability in Ivanti Endpoint Manager Mobile (EPMM) allows attackers to inject and execute arbitrary code without any authentication. Because EPMM is a mobile device management platform, it typically holds privileged access to corporate devices and sensitive configuration data. A successful exploit could give an attacker full remote control over the server and, by extension, visibility into or control over managed endpoints — making this a high-priority risk for any organization running this product.Thu, 29 Jan 2026 00:00:00 GMTIvantiEndpoint Manager Mobile (EPMM)https://wildfortech.com/security#CVE-2025-4427https://wildfortech.com/security#CVE-2025-4427Ivanti EPMM exposes an API component that can be accessed without valid credentials due to a flawed implementation of the Spring Framework library. Attackers can craft specific API requests to bypass authentication entirely, reaching protected resources as if they were legitimate administrators. Because EPMM manages mobile devices across an organization, unauthorized access could expose device configurations, credentials, and sensitive enterprise data — making this a high-priority issue for any organization running the product.Mon, 19 May 2025 00:00:00 GMTIvantiEndpoint Manager Mobile (EPMM)https://wildfortech.com/security#CVE-2025-4428https://wildfortech.com/security#CVE-2025-4428This vulnerability allows an authenticated attacker to remotely execute arbitrary code on Ivanti EPMM systems by sending specially crafted API requests. The flaw stems from an insecure implementation of the Hibernate Validator library. Because EPMM is a mobile device management platform, a successful exploit could give attackers control over the system that manages and enforces security policies across an organization's entire mobile device fleet — a high-value target with broad organizational access.Mon, 19 May 2025 00:00:00 GMTIvantiEndpoint Manager Mobile (EPMM)