HIGHVulnerability
Verified
Global

CISA KEV: Ivanti Endpoint Manager Mobile (EPMM) — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution.

Analysis

Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely authenticated user with administrative access to achieve remote code execution. Added to CISA Known Exploited Vulnerabilities catalog on 2026-05-07. Remediation due: 2026-05-10.

Indicators of Compromise (1)

CVE (1)
CVE-2026-6973
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on May 7, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerability

ShinyHunters Claims Second Attack Against Instructure

The edtech company is struggling to wrest control from its hackers. PII belonging to hundreds of millions of people is on the line.

Dark Reading
MEDIUMVulnerability

Kraken parent Payward files for national trust charter

We have filed an application with the Office of the Comptroller of the Currency (“OCC”) for a national trust company charter. If approved, the application would establish Payward National Trust Company (“PNTC”), which would provide fiduciary custody and other services primarily for digital assets.

Finextra
MEDIUMVulnerability

GM to pay over $12 million in California privacy settlement involving driver data

The settlement, announced by California officials Friday, is the largest fine issued under the California Consumer Privacy Act (CCPA) in its more than five-year history.

The Record