Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again

Ivanti’s EPMM is under active attack, thanks to two critical zero-days

Critical Ivanti Endpoint Manager Mobile (EPMM) zero-day exploited in the wild (CVE-2026-1281 & CVE-2026-1340)

Ivanti patches two actively exploited critical vulnerabilities in EPMM

CVE-2026-1281, CVE-2026-1340: Ivanti Endpoint Manager Mobile (EPMM) Zero-Day Vulnerabilities Exploited

Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340) - watchTowr Labs

January blues return as Ivanti coughs up exploited EPMM zero-days