← CVE Intelligence

CVE-2026-18851

Ivanti / Endpoint Manager Mobile PUBLISHED

Description (CNA)

Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin.

Affected (CNA)

Vendor / productVersions
Ivanti / Endpoint Manager Mobileunaffected 12.10.0.0; unaffected 12.9.0.2; unaffected 12.8.0.4

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.