What is the CVSS score of CVE-2026-6973?

CVE-2026-6973 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 5.0%.

Which versions of Ivanti EPMM are affected by CVE-2026-6973?

Ivanti Endpoint Manager Mobile (EPMM) contains a remote code execution vulnerability affecting versions prior to 12.6.1.1, 12.7.0.1, and 12.8.0.1 that allows authenticated administrators to…

Is there a public PoC exploit available for CVE-2026-6973?

Yes, a public proof-of-concept exploit is available for CVE-2026-6973. Prioritise patching immediately. EPSS: 5.0%.

Ivanti EPMM CVE-2026-6973

EUVD-2026-28396 HIGH

Improper Input Validation (CWE-20)

2026-05-07 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

GHSA-36fg-ffjj-h5p6

RCE Ivanti

7.2

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Added to CISA KEV

May 07, 2026 - 16:33 CISA

Analysis Generated

May 07, 2026 - 16:30 vuln.today

CVE Published

May 07, 2026 - 16:16 nvd

HIGH 7.2

DescriptionNVD

An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.

AnalysisAI

Remote code execution in Ivanti Endpoint Manager Mobile (EPMM) allows authenticated administrators to execute arbitrary code on the server. Affects EPMM versions prior to 12.6.1.1, 12.7.0.1, and 12.8.0.1 through improper input validation vulnerabilities. …

RemediationAI

Within 24 hours: Inventory all EPMM deployments and document current versions; audit and restrict EPMM administrator account access to principle of least privilege. Within 7 days: Upgrade all EPMM instances to versions 12.6.1.1, 12.7.0.1, or 12.8.0.1 or later; verify patch application across all servers. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory