CVE-2026-6973

HighCVSS 7.2/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
May 7, 2026
Last modified
Jun 17, 2026
Added to CISA KEV
May 7, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-697309.8Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.CVE-2026-697317.8Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.CVE-2026-697328.1Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.CVE-2026-697337.8Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.CVE-2026-697346.5Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-697357.0Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-697367.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorizCVE-2026-697387.8Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.CVE-2026-697397.5Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.CVE-2026-697408.8Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.CVE-2026-697415.5Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.CVE-2026-697428.8Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVE-2026-6973: High severity, CVSS 7.2 | Vulnix