The version of Ivanti Endpoint Manager Mobile, formerly MobileIron Core, running on the remote host is before 12.6.1.1, 12.7.x before 12.7.0.1, or 12.8.x before 12.8.0.1, and is therefore affected by multiple vulnerabilities.

  - An Improper Access Control vulnerability allows a remote authenticated attacker to gain administrative   access. (CVE-2026-5786)

  - An Improper Certificate Validation vulnerability allows a remote unauthenticated attacker to impersonate   registered Sentry hosts and obtain valid CA-signed client certificates. (CVE-2026-5787)

  - An Improper Access Control vulnerability allows a remote unauthenticated attacker to invoke arbitrary   methods. (CVE-2026-5788)

  - An Improper Input Validation vulnerability allows a remotely authenticated user with administrative access   to achieve remote code execution. (CVE-2026-6973)

  - Improper certificate validation allows a remote unauthenticated attacker to enroll a device belonging to   a restricted set of unenrolled devices, leading to information disclosure about EPMM appliance and impacting   on the integrity of the newly enrolled device identity. (CVE-2026-7821)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ivanti Endpoint Manager Mobile < 12.6.1.1 / 12.7 < 12.7.0.1 / 12.8 < 12.8.0.1 (May 2026)

critical Nessus Plugin ID 314447

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Jun 12, 2026, 7:53 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202606121953
Version 1.3 May 14, 2026, 9:29 PM CISA reference Plugin Feed: 202605142129
Version 1.1 May 14, 2026, 3:47 AM New Plugin Feed: 202605140347