CVE-2026-6973

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 7, 2026

Last Seen

September 9, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Ivanti EPMM Zero-Day Vulnerability Exploited in Active Attacks72.9

Ivanti has disclosed a zero-day vulnerability (CVE-2026-6973) in its Endpoint Manager Mobile (EPMM) product, which has been actively exploited by attackers. This flaw allows authenticated users with administrative privileges to execute arbitrary code remotely on affected systems. Ivanti issued patch...

Ivanti Discloses Critical Authentication Bypass Vulnerabilities60.6

On September 8, 2026, Ivanti disclosed multiple vulnerabilities affecting its Endpoint Manager Mobile (EPMM), Neurons for ITSM, and Sentry products. Two critical CVEs, CVE-2026-83527 and CVE-2026-18851, allow for authentication bypass and privilege escalation, respectively. CVE-2026-83527 has a CVSS...