Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access

Ivanti has warned of a new security vulnerability affecting Endpoint Manager Mobile (EPMM) that is being exploited in limited attacks. The high-severity flaw, CVE-2026-6973 with a CVSS score of 7.2, stems from improper input validation in EPMM versions before 12.6.1.1, 12.7.0.1, and 12.8.0.1. The vulnerability allows a remotely authenticated user with administrative access to achieve remote code execution.