Vulnerability Analysis
Ivanti EPMM CVE-2026-6973: Authenticated RCE on CISA KEV in May 2026
Ivanti disclosed CVE-2026-6973 on May 7, 2026, an improper-input-validation RCE in Endpoint Manager Mobile already seeing limited exploitation. CISA gave federal agencies a three-day patch deadline.
May 8, 202610 min read