This vulnerability (CVE-2026-6973) in Ivanti Endpoint Manager Mobile is caused by improper input validation (CWE-20). It affects versions before 12.6.1.1, 12.7.0.1, and 12.8.0.1 and allows a remotely authenticated administrator to achieve remote code execution. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor has published the vulnerability but has not yet provided an official fix or remediation level. The product is not a cloud service, so remediation depends on vendor patch releases. No exploits are currently known in the wild.

Successful exploitation allows a remotely authenticated user with administrative access to execute arbitrary code on the affected system, potentially compromising confidentiality, integrity, and availability of the Endpoint Manager Mobile environment. This could lead to full system compromise under the privileges of the administrative user.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict administrative access to trusted users only and monitor for suspicious activity related to administrative operations. Avoid exposing the management interface to untrusted networks. Follow Ivanti's updates closely for any forthcoming patches or mitigation instructions.