CVE-2026-83528
Received
Received - Intake
BaseFortify
Vulnerability report for CVE-2026-83528, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-10
Last updated on: 2026-11-10
Assigner: ivanti
Description
Description
Exposure of PII in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Ivanti | Endpoint Manager Mobile | to 12.9.0.3 (exc) |
| Ivanti | Endpoint Manager Mobile | From 12.9.0.3 (exc) to 12.10.0.1 (exc) |
| Ivanti | Endpoint Manager Mobile | From 12.10.0.1 (exc) to 12.11.0.0 (exc) |
| Ivanti | Endpoint Manager Mobile | From 12.11.0.0 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-359 | The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected. |
