CVE-2025-10573 - Vulnerability Details

Related Threat Clusters

• Ivanti EPM Vulnerability Allows Remote Code Execution

  Ivanti has disclosed a critical vulnerability in its Endpoint Manager (EPM) solution, tracked as CVE-2025-10573, which has a CVSS score of 9.6. This Stored XSS vulnerability could allow remote unauthenticated attackers…

  2 articles · Updated December 10, 2025
• Critical Vulnerability in Ivanti Endpoint Manager Requires Immediate Patching

  Ivanti has issued security updates for a critical vulnerability (CVE-2025-10573) in its Endpoint Manager (EPM) product. This flaw could allow remote, unauthenticated attackers to execute arbitrary JavaScript code,…

  6 articles · Updated December 10, 2025
• European Commission Confirms Cyber Incident Affecting Mobile Device Management

  The European Commission has detected and contained a cyber incident affecting its mobile device management infrastructure. The breach, identified on January 30, resulted in unauthorized access to a limited subset of…

  18 articles · Updated February 9, 2026

Recent Intelligence Reports

• European Commission breached - investigating mobile hack — Computing · February 9, 2026
• Hundreds of Ivanti EPM systems exposed online as critical flaw patched — Csoonline · December 10, 2025
• Ivanti Patches Critical Security Vulnerability in Endpoint Manager — Heise.De · December 10, 2025
• CC-4726 — Digital.Nhs.Uk · December 10, 2025
• Ivanti patches Endpoint Manager flaw allowing remote code execution — Computing · December 10, 2025
• Critical Vulnerability in Ivanti Endpoint Manager — Csa.Sg · December 10, 2025
• Ivanti warns customers of new EPM flaw enabling remote code execution — Securityaffairs.Co · December 9, 2025
• Ivanti warns of critical Endpoint Manager code execution flaw — Bleepingcomputer · December 9, 2025

Related Entities