CVE-2020-15505

Ivanti MobileIron products suffered a remote code execution vulnerability that was actively exploited in the wild.

Ivanti MobileIron's Core & Connector, Sentry, and Monitor and Reporting Database products contained an unspecified vulnerability allowing remote code execution. This failure is critical for DIB organizations because MobileIron is a common endpoint management tool, and an RCE flaw enables attackers to fully compromise devices, steal data, and pivot laterally. Organizations must ensure all MobileIron components are patched immediately and monitor for signs of compromise.

Shame score — The vulnerability was actively exploited in the wild (KEV list) and linked to ransomware campaigns, indicating a severe, avoidable failure in patch management and security hygiene.