CVE-2026-6973

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager Mobile versions prior to 12.7.0.2 Ivanti Endpoint Manager Mobile versions prior to 12.8.0.3 Ivanti Endpoint Manager Mobile versions prior to 12.9.0.1

Description A configuration control issue caused by improper input validation allows a remote authenticated attacker with administrator access to inject arbitrary Apache directives. This can lead to remote code execution on the system. The issue has been actively exploited in the wild, with over 850 servers reported as reachable from the internet. Successful exploitation may put employee payroll records, device credentials, and sensitive files at risk.

Recommendations Update to version 12.6.1.1 or higher. Update to version 12.7.0.1 or higher. Update to version 12.8.0.1 or higher.