This vulnerability (CVE-2026-7821) in Ivanti Endpoint Manager Mobile arises from improper certificate validation before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1. It permits a remote unauthenticated attacker to enroll a device that should be restricted, leading to unauthorized information disclosure about the EPMM appliance and affecting the integrity of the enrolled device's identity. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality and integrity impacts.

Successful exploitation allows an unauthenticated remote attacker to enroll unauthorized devices within a restricted set, resulting in disclosure of sensitive information about the EPMM appliance and compromising the integrity of the device identity. There is no impact on availability. This could undermine trust in device enrollment and potentially expose sensitive configuration or operational details of the EPMM environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation or patch links are provided, organizations should monitor Ivanti's advisories for updates. Until a fix is available, consider restricting network access to the EPMM enrollment interface to trusted sources and closely monitor enrollment logs for unauthorized attempts.