{"id":"CVE-2026-83528","aliases":[],"cve":{"records":[{"id":"CVE-2026-83528","source":"ivanti","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-08-31T16:19:07.442Z","published":"2026-11-10T16:04:37.642Z","modified":"2026-11-10T17:31:04.819Z"}],"publishers":[{"name":"ivanti","role":"CNA","organizationId":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","modified":"2026-11-10T17:31:04.819Z"}],"references":[{"url":"https://hub.ivanti.com/s/article/November-2026-Security-Advisory-Ivanti-EPMM-Multiple-CVEs","tags":[],"source":"ivanti"}],"weaknesses":[{"id":"CWE-359","description":"CWE-359 Exposure of private personal information to an unauthorized actor","source":"ivanti"}],"applicability":[],"prioritization":[]},"title":"Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak GDPR…","titleSource":"ivanti","descriptionSource":"ivanti","description":"Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information.","score":4.9,"severity":"medium","published":"2026-11-10T16:04:37.642Z","modified":"2026-11-10T17:31:04.819Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Ivanti","name":"Endpoint Manager Mobile","platforms":[],"versions":[{"version":"12.11.0.0","status":"unaffected","versionType":"custom"},{"version":"12.10.0.1","status":"unaffected","versionType":"custom"},{"version":"12.9.0.3","status":"unaffected","versionType":"custom"}],"defaultStatus":"affected","cpes":[],"source":"ivanti","url":"https://www.cve.org/CVERecord?id=CVE-2026-83528"}],"remediation":[],"references":["https://hub.ivanti.com/s/article/November-2026-Security-Advisory-Ivanti-EPMM-Multiple-CVEs"],"sources":[{"name":"CVE","id":"CVE-2026-83528","modified":"2026-11-10T17:31:04.819Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-83528"}],"assessments":[{"source":"ivanti","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","score":4.9}],"sourceAffected":[],"observedAt":"2026-11-10T17:39:31.066Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T05:10:35.708Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-11-10T16:25:33.333Z","attemptedAt":"2026-11-10T16:25:33.333Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-10T16:25:33.492Z","attemptedAt":"2026-11-10T16:25:33.492Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-10T16:25:33.833Z","attemptedAt":"2026-11-10T16:25:33.833Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-10T16:25:33.693Z","attemptedAt":"2026-11-10T16:25:33.693Z"}],"evidence":[],"aiSummary":{"text":"Ivanti EPMM versions before 12.11.0.0, 12.10.0.1, and 12.9.0.3 may expose PII to a remote authenticated attacker with admin privileges. The weakness is exposure of private personal information. Impact is leakage of GDPR protected user information.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-10T17:41:09.867Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-83528"}]}}