Ivanti EPMM and Sentry RCE flaws patched
Ivanti patched multiple vulnerabilities in EPMM and Sentry products allowing remote code execution and security policy bypass.
Sourcecert.ssi.gouv.fr — open the original
What to check
- Applies to
- The 4 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation
- CISA lists CVE-2026-10520 and CVE-2026-6973 as exploited in the wild.
The French CERT has issued an advisory regarding multiple vulnerabilities discovered in Ivanti Endpoint Manager Mobile (EPMM) and Ivanti Sentry products. The vulnerabilities enable attackers to achieve remote arbitrary code execution and bypass security policies.
Affected products include EPMM versions 12.8.x prior to 12.8.0.3, 12.9.x prior to 12.9.0.1, and versions earlier than 12.7.0.2. Sentry versions 10.6.x prior to 10.6.2, 10.7.x prior to 10.7.1, and versions earlier than 10.5.2 are also vulnerable. Four CVEs have been assigned to these vulnerabilities: CVE-2026-6973 and CVE-2026-10727 affecting EPMM, and CVE-2026-10520 and CVE-2026-10523 affecting Sentry.
Ivanti released security updates on June 9, 2026, addressing all identified vulnerabilities. Organizations using affected versions should apply the vendor-provided patches immediately to mitigate the risk of remote code execution attacks.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0724
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,445 reports from 149 sources, 666 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs