CVE-2026-6973 Ivanti Endpoint Manager Mobile
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.
- CVSS
- 7.2 High
- EPSS
- 34%
- Percentile
- 98
- Published
- 2026-05-07
- Force
- 9 of 12
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
- Added
- 2026-05-07
- Federal patch deadline
- 2026-05-10
- Ransomware use
- not known