[MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile

{
  "id": "c82adf1a903a05a95033d34b868c940ac78350cc87eceb853a0098c7e524f086",
  "url": "https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-001/",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "[MàJ] Multiples vulnérabilités dans Ivanti Endpoint Manager Mobile",
    "summary": "Ivanti reported that unauthenticated attackers could achieve remote code execution through two vulnerabilities in Endpoint Manager Mobile, which were actively exploited in targeted attacks. Temporary RPM fixes are available; Ivanti Endpoint Manager Mobile version 12.8.0.0 is identified as the version at which those temporary fixes are no longer required.",
    "evidence": "L'éditeur précise que les correctifs apportés par ses scripts RPM sont temporaires et qu'il est nécessaire de les réinstaller à chaque montée de version jusqu'à l'obtention d'Ivanti Endpoint Manager Mobile version 12.8.0.0.",
    "products": [
      {
        "name": {
          "value": "Endpoint Manager Mobile",
          "evidence": "Endpoint Manager Mobile versions 12.5.0.x sans le script correctif RPM_12.x.0.x"
        },
        "prerequisites": [
          {
            "value": "sans le script correctif RPM_12.x.0.x",
            "evidence": "Endpoint Manager Mobile versions 12.5.0.x sans le script correctif RPM_12.x.0.x"
          },
          {
            "value": "sans le script correctif RPM_12.x.1.x",
            "evidence": "Endpoint Manager Mobile versions 12.5.1.x sans le script correctif RPM_12.x.1.x"
          }
        ],
        "fixed_versions": [
          {
            "value": "Ivanti Endpoint Manager Mobile version 12.8.0.0",
            "evidence": "L'éditeur précise que les correctifs apportés par ses scripts RPM sont temporaires et qu'il est nécessaire de les réinstaller à chaque montée de version jusqu'à l'obtention d'Ivanti Endpoint Manager Mobile version 12.8.0.0."
          }
        ],
        "affected_versions": [
          {
            "value": "Endpoint Manager Mobile versions 12.5.0.x sans le script correctif RPM_12.x.0.x",
            "evidence": "Endpoint Manager Mobile versions 12.5.0.x sans le script correctif RPM_12.x.0.x"
          },
          {
            "value": "Endpoint Manager Mobile versions 12.5.1.x sans le script correctif RPM_12.x.1.x",
            "evidence": "Endpoint Manager Mobile versions 12.5.1.x sans le script correctif RPM_12.x.1.x"
          },
          {
            "value": "Endpoint Manager Mobile versions 12.6.0.x sans le script correctif RPM_12.x.0.x",
            "evidence": "Endpoint Manager Mobile versions 12.6.0.x sans le script correctif RPM_12.x.0.x"
          },
          {
            "value": "Endpoint Manager Mobile versions 12.6.1.x sans le script correctif RPM_12.x.1.x",
            "evidence": "Endpoint Manager Mobile versions 12.6.1.x sans le script correctif RPM_12.x.1.x"
          },
          {
            "value": "Endpoint Manager Mobile versions 12.7.0.x sans le script correctif RPM_12.x.0.x",
            "evidence": "Endpoint Manager Mobile versions 12.7.0.x sans le script correctif RPM_12.x.0.x"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-1281",
        "evidence": "les vulnérabilités critiques CVE-2026-1281 et CVE-2026-1340 affectant Ivanti Endpoint Manager Mobile (EPMM)."
      },
      {
        "value": "CVE-2026-1340",
        "evidence": "les vulnérabilités critiques CVE-2026-1281 et CVE-2026-1340 affectant Ivanti Endpoint Manager Mobile (EPMM)."
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-cert-fr-alerts",
  "document_id": 23310,
  "published_at": "2026-01-30T00:00:00+00:00"
}