{"id":847,"date":"2026-05-07T18:54:42","date_gmt":"2026-05-07T18:54:42","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=847"},"modified":"2026-05-07T18:54:42","modified_gmt":"2026-05-07T18:54:42","slug":"ivanti-epmm-cve-2026-6973-rce-under-active-exploitation-grants-admin-level-access","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=847","title":{"rendered":"Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>May 07, 2026<\/span><\/span>Vulnerability \/ Network Security<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

Ivanti is warning that a new security flaw impacting Endpoint Manager Mobile (EPMM) has been explored in limited attacks in the wild.<\/p>\n

The high-severity vulnerability, CVE-2026-6973<\/strong> (CVSS score: 7.2), is a case of improper input validation affecting EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1.<\/p>\n

It allows \u00aba remotely authenticated user with administrative access to achieve remote code execution,\u00bb Ivanti said<\/a> in an advisory released today.<\/p>\n

\u00abWe are aware of a very limited number of customers exploited with CVE-2026-6973. Successful exploitation requires Admin authentication. If customers followed Ivanti’s recommendation in January to rotate credentials if you were exploited with CVE-2026-1281 and CVE-2026-1340, then your risk of exploitation from CVE-2026-6973 is significantly reduced.\u00bb<\/p>\n

It’s currently not known who is behind the exploitation efforts, if any of those attacks were successful, and what the end goals of the attacks were.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

The development has prompted the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to add<\/a> the flaw to its Known Exploited Vulnerabilities (KEV<\/a>) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by May 10, 2026.<\/p>\n

Also patched by Ivanti in EPMM are four other flaws –<\/p>\n