VULNERABILITY INTELLIGENCE

CVE-2026-5787

CVSS score8.9 HIGH
EPSS probability0.69%
CISA KEVNot currently listed
Published2026-05-07
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

Description

An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates.

Weakness classification

  • 3c1d8aa1-5a33-4ea4-8992-aadd6440af75: CWE-295

Primary references