CVE-2026-18851

HIGHCVSS 8.81% EPSS

Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin.

Published 2026-09-08 · last modified 2026-09-09

Affected products

VendorProduct
ivantiendpoint_manager_mobile

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.