CVE-2024-22026: Ivanti Endpoint Manager Mobile

Medium severity, CVSS 6.7. EPSS: 1.1% chance of exploitation in the next 30 days.

A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary commands on the appliance.

Affected products

• Ivanti Endpoint Manager Mobile: before 12.1.0.0 (fixed in 12.1.0.0)

Published 2024-05-22. Last modified 2026-06-17.