Skip to content
OpenAdvisories
High · 7.2 CVE-2025-10243 EUVD-2025-34212GHSA-jwmr-jj8m-x45w

OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attack…

Published Oct 14, 2025 · Updated Nov 4, 2026 · Assigned by ivanti

Vendor: ivanti Product: Endpoint Manager Mobile Category: Network devices

Description

OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

Affected products

VendorProductAffectedFixed
Ivanti Endpoint Manager Mobile — 12.6.0.2

Advisories 1

References