Are device management tools (Microsoft Intune, Jamf, Workspace ONE) safe right now?
No device management tool flaws have been added to CISA's exploited list in the last 90 days (the most recent was Mar 9, 2026). Keep automatic updates on: that can change any day.
Earlier exploited flaws
- Omnissa Workspace ONE Server-Side Request Forgery
- VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability Zero-day
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 1 | 0 |
| 2025 | 0 | 0 |
| 2024 | 0 | 0 |
| 2023 | 0 | 0 |
| 2022 | 1 | 1 |
Questions
Are device management tools (Microsoft Intune, Jamf, Workspace ONE) safe right now?
No device management tool flaws have been added to CISA's exploited list in the last 90 days (the most recent was Mar 9, 2026). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many device management tools vulnerabilities have been exploited?
2 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 1 of them used by ransomware.
Covers products matching intune, jamf, workspace one, omnissa. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.