$\"\"$ <\/a><\/div>\n

Ivanti is warning {that a} new safety flaw impacting Endpoint Supervisor Cell (EPMM) has been explored in restricted assaults within the wild.<\/p>\n

The high-severity vulnerability, CVE-2026-6973<\/strong> (CVSS rating: 7.2), is a case of improper enter validation affecting EPMM earlier than variations 12.6.1.1, 12.7.0.1, and 12.8.0.1.<\/p>\n

It permits “a remotely authenticated consumer with administrative entry to attain distant code execution,” Ivanti mentioned<\/a> in an advisory launched immediately.<\/p>\n

“We’re conscious of a really restricted variety of clients exploited with CVE-2026-6973. Profitable exploitation requires Admin authentication. If clients adopted Ivanti’s suggestion in January to rotate credentials for those who had been exploited with CVE-2026-1281 and CVE-2026-1340<\/a>, then your danger of exploitation from CVE-2026-6973 is considerably lowered.”<\/p>\n

It is at the moment not identified who’s behind the exploitation efforts, if any of these assaults had been profitable, and what the top objectives of the assaults had been.<\/p>\n

<\/p>\n

The event has prompted the U.S. Cybersecurity and Infrastructure Safety Company (CISA) to add<\/a> the flaw to its Identified Exploited Vulnerabilities (KEV<\/a>) catalog, requiring Federal Civilian Government Department (FCEB) businesses to use the fixes by Might 10, 2026.<\/p>\n

Additionally patched by Ivanti in EPMM are 4 different flaws –<\/p>\n

\n
CVE-2026-5786<\/strong> (CVSS rating: 8.8) – An improper entry management vulnerability that permits a distant authenticated attacker to achieve administrative entry.<\/li>\n
CVE-2026-5787<\/strong> (CVSS rating: 8.9) – An improper certificates validation vulnerability that permits a distant unauthenticated attacker to impersonate registered Sentry hosts and acquire legitimate CA-signed consumer certificates.<\/li>\n
CVE-2026-5788<\/strong> (CVSS rating: 7.0) – An improper entry management vulnerability that permits a distant unauthenticated attacker to invoke arbitrary strategies.<\/li>\n
CVE-2026-7821<\/strong> (CVSS rating: 7.4) – An improper certificates validation vulnerability that permits a distant unauthenticated attacker to enroll a tool belonging to a restricted set of unenrolled units, resulting in info disclosure in regards to the EPMM equipment and impacting the integrity of the newly enrolled gadget id.<\/li>\n<\/ul>\n
“The problems solely have an effect on the on-prem EPMM product, and usually are not current in Ivanti Neurons for MDM, Ivanti’s cloud-based unified endpoint administration answer, Ivanti EPM (a equally named, however completely different product), Ivanti Sentry, or some other Ivanti merchandise,” the corporate mentioned<\/a>.<\/p>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"
\ue804Ravie Lakshmanan\ue802Might 07, 2026Vulnerability \/ Community Safety Ivanti is warning {that a} new safety flaw impacting Endpoint Supervisor Cell (EPMM) has been explored in restricted assaults within the wild. The high-severity vulnerability, CVE-2026-6973 (CVSS rating: 7.2), is a case of improper enter validation affecting EPMM earlier than variations 12.6.1.1, 12.7.0.1, and 12.8.0.1. It permits “a […]<\/p>\n","protected":false},"author":2,"featured_media":14549,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[539,768,8992,8991,5428,2036,5376,855,6788],"class_list":["post-14547","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-access","tag-active","tag-adminlevel","tag-cve20266973","tag-epmm","tag-exploitation","tag-grants","tag-ivanti","tag-rce"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/14547","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14547"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/14547\/revisions"}],"predecessor-version":[{"id":14548,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/14547\/revisions\/14548"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/14549"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14547"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14547"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14547"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}