Skip to content

CVE-2025-10573

CVE

Threat entity extracted from intelligence sources

Frequency
8
occurrences
First Seen
December 9, 2025
Last Seen
February 9, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Ivanti has disclosed a critical vulnerability in its Endpoint Manager (EPM) solution, tracked as CVE-2025-10573, which has a CVSS score of 9.6. This Stored XSS vulnerability could allow remote unauthenticated attackers to execute arbitrary code. Users are advised to address this issue promptly to mi...

Ivanti has issued security updates for a critical vulnerability (CVE-2025-10573) in its Endpoint Manager (EPM) product. This flaw could allow remote, unauthenticated attackers to execute arbitrary JavaScript code, affecting users and administrators of the impacted versions. Immediate updates are adv...

The European Commission has detected and contained a cyber incident affecting its mobile device management infrastructure. The breach, identified on January 30, resulted in unauthorized access to a limited subset of Personally Identifiable Information (PII), including staff names and mobile numbers....

Public Exploits

Checking GitHub for proof-of-concept code…