Feeds.Feedburner

Ivanti EPM Vulnerability Allows Remote Code Execution

First seen 10 Dec 2025, 12:48 UTC • Securityaffairs.Co

•74.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Ivanti has disclosed a critical vulnerability in its Endpoint Manager (EPM) solution, tracked as CVE-2025-10573, which has a CVSS score of 9.6. This Stored XSS vulnerability could allow remote unauthenticated attackers to execute arbitrary code. Users are advised to address this issue promptly to mitigate potential risks.

How this analysis works

Attack Flow

Continue Reading

Urgent CISA Directive: Patch Critical Ivanti EPMM Vulnerability CVE-2026-1340 by April 11 Red Menshen APT Uses BPFdoor for Long-Term Espionage in Telecom Networks State-Sponsored Actors Target Network Edge Devices Amid Rising Exploits Belgian State Security and Organizations Targeted by Cyberattacks Ivanti Zero-Day Exploits Lead to Global Data Breach Ivanti Sentry Vulnerabilities Allow Remote Code Execution and Admin Access

Ivanti EPM Vulnerability Allows Remote Code Execution

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading