Thursday, 29 January 2026

Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released

iT4iNT SERVER Ivanti has rolled out security updates to address two security flaws impacting Ivanti Endpoint Manager Mobile (EPMM) that have been exploited in zero-day attacks, one of which has been added by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to its Known Exploited Vulnerabilities (KEV) catalog.
The critical-severity vulnerabilities are listed below -

CVE-2026-1281 (CVSS score: VDS VPS Cloud


http://dlvr.it/TQfDyJ

No comments:

Post a Comment

Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

iT4iNT SERVER Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) ...