Critical Alert 4 Active Exploits Detected Today

CVE-2025-67038 — Lantronix EDS5000 Code Injection Vulnerability →
CVE-2026-34910 — Ubiquiti UniFi OS Improper Input Validation Vulnerability →
CVE-2026-34909 — Ubiquiti UniFi OS Path Traversal Vulnerability →
CVE-2026-34908 — Ubiquiti UniFi OS Improper Access Control Vulnerability →
Powered by CVE Watchtower
×
June 24, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-6973NVD

Vulnerability Summary

An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative access to achieve remote code execution.
Severity Level
HIGH(7.2)
Published Date
May 7, 2026
Last Modified
Jun 11, 2026
Exploitation Status
ACTIVE
EPSS Score (30-Day)
34.45%Probability
Root Weakness (CWE)
CWE-20: Improper Input Validation ↗
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References