Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2024-02-08. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-08 | 1 | Patch1 |
| 2026-07-14 | 1 | Disclosure1 |
Ivanti EPMM auth bypass (CVE-2023-35082) is critical. CVSS 9.8. If you're managing enterprise mobile fleets, detecting this bypass is your immediate priority. We've already integrated the exploit pattern.
Post summary
The message highlights a critical authentication bypass in Ivanti EPMM (CVE‑2023‑35082) with a CVSS of 9.8, urging immediate detection and noting that the exploit pattern has been integrated.
🔒 #CyberSecurity CVE-2023-35082: Ivanti EPMM Exploitation — Detection and Hardening Guide "Active exploitation of Ivanti EPMM (CVE-2023-35082) allows unauthenticated RCE. Immediate patching…" 🔗 https://securityarsenal.com/blog/cve-2023-35082-ivanti-epmm-exploitation-detection-and-hardening-guide #CyberSecurity #ThreatIntel #cve #zeroday #patchtuesday
Post summary
The guide warns of active exploitation of Ivanti EPMM CVE-2023‑35082, stresses immediate patching, and offers hardening instructions to mitigate unauthenticated remote code execution.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ivanti | endpoint_manager_mobile | - | - | - |