High-Severity Vulnerabilities Addressed in Endpoint Manager Mobile

**Executive summary:** The report details two high-severity vulnerabilities in Ivanti Endpoint Manager Mobile—CVE-2026-6973 (Apache directive injection enabling remote code execution for authenticated users) and CVE-2026-10727 (OS-level input-handling flaw allowing authenticated attackers to execute commands as root)—and urges administrators to apply the vendor maintenance builds (12.9.0.1, 12.8.0.3, 12.7.0.2) immediately; no active exploitation was reported at disclosure.