U.S. Cybersecurity Agency Warns of Actively Exploited Ivanti EPMM Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical flaw impacting Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core to its Known Exploited Vulnerabilities (KEV) catalog, stating it's being actively exploited in the wild.
The vulnerability in question is CVE-2023-35082 (CVSS score: 9.8), an authentication bypass

actively exploited agency authentication catalog cisa critical critical flaw cve cvss cvss score cybersecurity endpoint epmm exploited exploited vulnerabilities flaw infrastructure infrastructure security ivanti ivanti endpoint manager ivanti epmm kev known exploited known exploited vulnerabilities manager mobile mobileiron mobileiron core question score security vulnerabilities vulnerability