THREATOPS

THREAT OPS › CVEs › CVE-2026-1281

CVE-2026-1281 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA KEVExploited: confirmedIvanti

Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution.

Vulnerability details

Affected productsEndpoint Manager Mobile (EPMM)
KEV remediation due2026-02-01

Related reporting

Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)watchtowr