CVE-2025-10243(ivanti / endpoint_manager_mobile)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

ivanti CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://forums.ivanti.com/s/article/Security-Advisory-Endpoint-Manager-Mobile-EPMM-10-2025-Multiple-CVEs?language=en_US

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

endpoint_manager_mobile

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Affected systems

Vendors

ivanti

Products

endpoint_manager_mobile

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

DFIR Lab@DFIR_Lab21h
🚨 HIGH SEVERITY: CVE-2025-10243 (CVSS 7.2) OS command injection in Ivanti EPMM admin panel enables RCE for authenticated admins. Affected: versions before 12[.]6[.]0[.]2, 12[.]5[.]0[.]4, 12[.]4[.]0[.]4 Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/Q5n3cu9RPw
0000034
146 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ivanti	endpoint_manager_mobile	-	-	-

Explore more

Back to dashboard ivanti CVEs endpoint_manager_mobile vulnerabilities