NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Acces

BACKGROUND
1 SIGNALFIRST DETECTED 7 May 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
7 May
Ivanti warns of new EPMM flaw exploited in zero-day attacks

Ivanti warned customers today to patch a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) exploited in zero-day attacks. [...]

REPORT · WHEN · BleepingComputerOPEN STORY
18 May
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws

Ivanti, Fortinet, n8n, SAP, and VMware have released security fixes for various vulnerabilities that could be exploited by bad actors to bypass authentication and execute

REPORT · HOW · The Hacker NewsOPEN STORY
7 May
PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

Palo Alto Networks has disclosed that threat actors may have attempted to unsuccessfully exploit a recently disclosed critical security flaw as early as April 9, 2026. The

REPORT · HOW · The Hacker NewsOPEN STORY
15 May
CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SD-WAN Controller to its Known Exploited

REPORT · WHAT · The Hacker NewsOPEN STORY
11 Jun
Max severity Ivanti Sentry vulnerability now exploited in attacks

Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile

REPORT · WHAT · BleepingComputerOPEN STORY
13 Oct
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October

REPORT · WHO · The Hacker NewsOPEN STORY
15 May
On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild. The

REPORT · WHO · The Hacker NewsOPEN STORY
1 Oct
Upgrading past CVE-2026-88772: version mapping and rollout order for NetScaler ADC and Gateway

<h1> Upgrading past CVE-2026-88772: version mapping and rollout order for NetScaler ADC and Gateway </h1> <p>The patching decision for the Citrix NetScaler bulletin CTX697096 of

REPORT · WHERE · Dev.toOPEN STORY
Sources
The Hacker News

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →