THREATOPS

THREAT OPS › CVEs › CVE-2026-6973

CVE-2026-6973 — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

CISA KEVExploited: confirmedIvanti

Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution.

Vulnerability details

Affected productsEndpoint Manager Mobile (EPMM)
KEV remediation due2026-05-10

Related reporting

[CISA KEV] CVE-2026-6973 — Ivanti Endpoint Manager Mobile (EPMM): Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerabilitycisa_kev
May 2026 CVE Landscaperecordedfuture