CVE-2025-10985 | Ivanti Endpoint Manager Mobile prior 12.4.0.4/12.5.0.4/12.6.0.2 Admin Panel os command injection

October 14, 2025 Yanac

A vulnerability labeled as critical has been found in Ivanti Endpoint Manager Mobile. The affected element is an unknown function of the component Admin Panel. Such manipulation leads to os command injection.

This vulnerability is listed as CVE-2025-10985. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More