OS Command Injection in Ivanti EPMM Admin Panel

CVE-2025-10243

What is CVE-2025-10243?

A vulnerability exists in the admin panel of Ivanti Endpoint Manager Mobile (EPMM) prior to specific versions, where a remote authenticated attacker with administrative privileges can exploit the system. This exploitation allows the attacker to execute arbitrary OS commands, leading to potential system compromise and unauthorized access to sensitive data. It is crucial for organizations utilizing affected versions to apply patches and update software promptly to mitigate such risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References