Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.
Vendor: Ivanti
Product: Endpoint Manager Mobile (EPMM)
EPSS: 0.345 (98.4th percentile, 2026-10-30)
Ivanti Endpoint Manager Mobile (EPMM) is affected by a flaw that lets a remotely authenticated user with administrative access achieve remote code execution. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2026-05-07.
Automated summary, checked against CISA and vendor descriptions; not yet reviewed by an analyst.
| Date | Event | Source |
|---|---|---|
| 2026-05-07 | Added to CISA KEV (confirmed exploitation) | CISA KEV |
Affected and fixed versions: see the vendor advisory or NVD entry below.