A critical remote code execution (RCE) vulnerability (CVE-2025-61932, CVSS 9.8) was discovered in LANSCOPE Endpoint Manager (On-Premise Edition, v9.4.7.1 and earlier), affecting both the Client Program (MR) and Detection Agent (DA). The flaw allows unauthenticated attackers to execute arbitrary commands with high privileges by sending crafted network packets, bypassing all user interaction (no clicks or email openings required). Evidence confirms active exploitation in real-world attacks, with malicious packets already targeting customer networks.The vulnerability poses an immediate risk to organizations using the on-premise solution, as it grants attackers direct control over endpoints without detection. While the Cloud Edition remains unaffected, all on-premise clients must apply the emergency patch to prevent compromise. Failure to patch exposes systems to full takeover, enabling attackers to deploy malware, steal data, or pivot deeper into networks. Administrators are urged to roll out updates immediately and monitor for suspicious traffic targeting the vulnerable agents. The flaw’s severity is amplified by its ease of exploitation and the high-value access it provides to corporate environments.