VYPR
← All advisories
High severity7.4NVD Advisory· Published May 7, 2026· Updated Jun 17, 2026

CVE-2026-7821

CVE-2026-7821

Description

Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to enroll a device belonging to a restricted set of unenrolled devices, leading to information disclosure about EPMM appliance and impacting on the integrity of the newly enrolled device identity.

Affected products

5
  • Ivanti/Endpoint Manager Mobile4 versions
    cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*range: <12.6.1.1
    • cpe:2.3:a:ivanti:endpoint_manager_mobile:12.7.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:endpoint_manager_mobile:12.8.0.0:*:*:*:*:*:*:*
    • (no CPE)range: <12.6.1.1, <12.7.0.1, <12.8.0.1
  • Ivanti/EPMMllm-fuzzy
    Range: <12.6.1.1, <12.7.0.1, <12.8.0.1

Patches

Vulnerability mechanics

References

1

News mentions

4