CVE-2026-6973
Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
Published May 7, 2026 · updated Jun 17, 2026 · Ivanti Endpoint Manager Mobile (EPMM)
Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution.
Timeline
Detection, updates, and resolution for this record.
May 7, 2026 · Catalog
Detected
Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution.
May 7, 2026 · CISA KEV
Known exploited
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
May 10, 2026 · CISA KEV
Remediation due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Jun 17, 2026 · Catalog
Updated
Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA due date May 10, 2026
Affected
- cpe ivanti/endpoint manager mobileversion unspecified
- cpe ivanti/endpoint manager mobile12.7.0.0
- cpe ivanti/endpoint manager mobile12.8.0.0
- vendor Ivanti Endpoint Manager Mobile (EPMM)version unspecified
Sources
- CISA KEVCVE-2026-6973
Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution.
cisa.gov - CVE.orgCVE-2026-6973
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-6973
30-day exploitation probability 2.5%
first.org - NIST NVDCVE-2026-6973
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.
nvd.nist.gov