This vulnerability (CVE-2026-5787) affects Ivanti Endpoint Manager Mobile before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1. It is caused by improper certificate validation (CWE-295), enabling a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates. The CVSS 3.1 base score is 8.9, indicating high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and scope change. The impact includes high confidentiality and integrity loss, with low availability impact. No vendor advisory or patch links are provided, and remediation level is not specified.

Successful exploitation allows an unauthenticated remote attacker to impersonate trusted Sentry hosts by obtaining valid CA-signed client certificates. This can lead to a complete breach of confidentiality and integrity of the affected system. The availability impact is low. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, organizations should monitor Ivanti's advisories for updates. Until a fix is available, consider restricting network access to trusted hosts and monitoring for suspicious certificate issuance or usage related to Sentry hosts.