Ivanti’s EPMM is under active attack, thanks to two critical zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-4428 | Authenticated Code Injection RCE in Ivanti Endpoint Manager Mobile (EPMM) API | 8.8 | 88% | KEV | KEV |
CVE-2026-1281+1 related CVE | Unauthenticated RCE in Ivanti Endpoint Manager Mobile (EPMM) | 9.8 | 99% | KEVPoC | KEV |
From the original article
4 min read at cyberscoop.com
Limited attacks occurred prior to Ivanti’s disclosure, followed by mass exploitation by multiple threat groups. More than 1,400 potentially vulnerable instances remain exposed. A logo sign outside of the headquarters of Ivanti in South Jordan, Utah.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.