CVE-2026-83528: Medium severity vulnerability

Published Nov 10, 2026

Updated

Exposure of PII in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Ivanti EPMM to a version that resolves this vulnerability.
Fixed in 12.10.0.1
Upgrade
Upgrade Ivanti EPMM to a version that resolves this vulnerability.
Fixed in 12.9.0.3
Upgrade
Upgrade Ivanti EPMM to a version that resolves this vulnerability.
Fixed in 12.8.0.5

Event History

Nov 10, 2026

CVE Published

via MITRE·04:04 PM

Data Sourced

via MITRE·04:04 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A remote attacker must be authenticated to Ivanti EPMM and have administrator privileges. The issue exposes GDPR-protected user information; the provided data does not indicate that unauthenticated or lower-privileged users can exploit it.

Which versions are affected, and which releases address it?

Ivanti EPMM versions before 12.10.0.1, 12.9.0.3, and 12.8.0.5 are affected. Updating to the applicable listed release addresses the affected version ranges.

CVE-2026-83528: Medium severity vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which versions are affected, and which releases address it?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which versions are affected, and which releases address it?