Ivanti Security Update: Patch Released for Multiple Endpoint Manager Vulnerabilities

Ivanti released urgent security updates for Endpoint Manager (EPM) addressing four vulnerabilities—one critical stored XSS (CVE-2025-10573, CVSS 9.6) and three high-severity flaws (including a file-write issue that could lead to RCE)—and urges administrators to apply the 2024 SU4 SR1 patch; no active exploitation or IoCs have been reported and mitigations include keeping management interfaces non‑internet facing.