This vulnerability (CVE-2026-5788) involves improper access control (CWE-284) in Ivanti Endpoint Manager Mobile before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1. It enables remote unauthenticated attackers to invoke arbitrary methods, potentially compromising system integrity and availability. The CVSS vector indicates the attack requires network access with high attack complexity and no privileges or user interaction. The vulnerability is published but lacks vendor advisory or patch information at this time.

The vulnerability allows remote unauthenticated attackers to invoke arbitrary methods, which can lead to high integrity impact and low availability impact on the affected system. Confidentiality impact is low. This could result in unauthorized actions or modifications within the Ivanti Endpoint Manager Mobile environment. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, users should monitor Ivanti's advisories for updates. Until a fix is available, consider restricting network access to the affected service to trusted sources if possible.