Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

Ivanti Vulnerability Exploit Could Expose UK NHS Data

Infosecurity Magazineby Kevin Poireault ()4 min read1 · 1 read
Analyze CVE-2025-4427 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-4428
+1 related CVE
Authenticated Code Injection RCE in Ivanti Endpoint Manager Mobile (EPMM) API
8.8
group max
88%KEV
KEV

From the original article

4 min read at infosecurity-magazine.com

Two healthcare organizations in the UK are said to be among the victims of a malicious campaign involving the exploitation of a vulnerability linked to cybersecurity hardware provider Ivanti. According to Netherlands-based cybersecurity company EclecticIQ, threat actors have attempted to exploit a vulnerability in Ivanti Endpoint Manager Mobile (EPMM).

Infosecurity Magazine

By Kevin Poireault · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.