CVE-2026-10727Patch

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-6973-CVE-2026-10727?language=en_US

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 1 classified signal
Peaked 2d ago at 1 mentions (2026-06-09); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Patch

266.7%

Disclosure

133.3%

Referenced assets9 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-09	1	Disclosure1
2026-06-10	1	Patch1
2026-06-16	1	Patch1

Full discourse3 posts

にゃん☆たく/takumi.a@taku888infinity136d
Patch
ぱっちちゅーずでー ▼Microsoft 2026 年 6 月のセキュリティ更新プログラム (月例) https://www.microsoft.com/en-us/msrc/blog/2026/06/202606-security-update ▼SAP SAP Security Patch Day - June 2026 https://support.sap.com/en/my-support/knowledge-base/security-notes-news/june-2026.html ▼Ivanti Security Advisory Ivanti Sentry (CVE-2026-10520, CVE-2026-10523) https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-6973 & CVE-2026-10727) https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-6973-CVE-2026-10727?language=en_US ▼Fortinet PSIRT Advisories | FortiGuard Labs https://fortiguard.fortinet.com/psirt Second-Order OS Command Injection via JSON Input on start vnc feature（CVE-2026-25089） https://fortiguard.fortinet.com/psirt/FG-IR-26-141 ▼Adobe https://helpx.adobe.com/security.html
Post summary
The post lists vendor security updates and patch advisories for several CVEs, providing official links but no PoC, exploit, or active exploitation details.
100211.2K
11.7K followersView on X
CCB Alert@CCBalert130d
Patch
Warning: High severity OS command injection in #Ivanti EPMM. CVE-2026-10727 CVSS: 7.2. This vulnerability allows a remote authenticated attacker to execute arbitrary commands as root. More info: https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-6973-CVE-2026-10727 #Patch #Patch #Patch
Post summary
The post warns of a high‑severity OS command injection (CVE‑2026‑10727) in Ivanti EPMM, providing technical details and a vendor advisory link that includes a patch. No active exploitation or PoC information is mentioned.
01000237
7.2K followersView on X
Kaitan ID Security@KaitanSecurity137d
Disclosure
⚠️ HIGH — CVE-2026-10727 An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote au… CVSS 7.2 Full analysis → https://sec.kaitan.id/cves/CVE-2026-10727 #Ivanti #CyberSecurity #InfoSec
Post summary
The tweet announces a high‑severity OS command injection flaw in certain IVANTI EPMM versions, providing basic technical details and a link to further analysis.
0001059
82 followersView on X

Explore more

Back to dashboard