# CVE-2026-6973

An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.

- Page: https://www.vulneraibility.com/cve/CVE-2026-6973
- CVSS: 7.2
- Known exploited: yes, in CISA KEV since 2026-05-07; CISA due date 2026-05-10
- EPSS: 34.45%
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2026-05-07)
- Weakness: CWE-20
- Published: 2026-05-07

## Affected

- ivanti:endpoint_manager_mobile

## References

- [other] https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-6973

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.