New Ivanti EPMM 0-Day Vulnerability Actively Exploited in Attacks
Ivanti has issued a critical security advisory for its Endpoint Manager Mobile (EPMM) product, disclosing multiple actively exploited vulnerabilities, including CVE-2026-6973, and urging all on-premises EPMM customers to apply patches immediately. At the time of disclosure, Ivanti confirmed active exploitation of CVE-2026-6973, a vulnerability that requires admin authentication to succeed. The flaws exclusively affect the […] The post New Ivanti EPMM 0-Day Vulnerability Actively Exploited in Attacks appeared first on Cyber Security News.
Ivanti EPMM customers are at risk due to multiple actively exploited vulnerabilities, including CVE-2026-6973, which allows remote code execution with administrative access. The vulnerability was exclusively found in versions prior to 12.6.1.1, 12.7.0.1, and 12.8.0.1.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HRead the full article
This is a curated summary. The complete article is available at Cyber Security News.