NCSC-2026-0359 [1.00] [M/H] Kwetsbaarheid verholpen in Ivanti Endpoint Manager Mobile

As cited

Copy frozen at 2026-09-10 00:44 UTC (site build).

vulnerabilities

NCSC-2026-0359 [1.00] [M/H] Kwetsbaarheid verholpen in Ivanti Endpoint Manager Mobile

Ivanti patched a missing authorization control vulnerability in Endpoint Manager Mobile versions prior to 12.10.0.0, 12.9.0.2, and 12.8.0.4. Authenticated users could exploit this flaw to escalate privileges to administrative level.

Why it matters: Organizations running older versions of Ivanti Endpoint Manager Mobile must update immediately to prevent privilege escalation by authenticated insiders or compromised accounts.

Source published

2026-09-09 13:28 UTC

First seen by Cybersecurity Tracker

2026-09-10 00:17 UTC