CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: May 10, 2026

CVE-2026-6973

High

CISA KEV

Ivanti/Endpoint Manager Mobile (EPMM)

Description

Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution.

Required Action

https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2026-6973

Risk Assessment

ELEVATED

In CISA KEV

Details

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Articles: 0

Timeline

Published

May 7, 2026

Added to KEV

May 7, 2026

Remediation Due

May 10, 2026

Affected Product

Ivanti

Endpoint Manager Mobile (EPMM)

View all Ivanti CVEs

External Links

NVD (NIST)CVE Details MITRE CVE