New Ivanti EPMM 0-Day Vulnerability Actively Exploited in Attacks

Ivanti published a critical security advisory for on‑premises Endpoint Manager Mobile (EPMM) disclosing multiple vulnerabilities — including an actively exploited CVE-2026-6973 — and strongly urging immediate patching. The advisory notes the issues affect only on‑prem EPMM (not Ivanti Neurons cloud), provides quick patch and mitigation steps (apply patch, monitor /var/log/httpd/https-access_log, restrict admin interfaces), and states some defects were discovered via AI-assisted security tooling.