Ivanti's January bad luck continues as 0-days hit customers

Two critical zero-day vulnerabilities (CVE-2026-1281 and CVE-2026-1340) in Ivanti's Endpoint Manager Mobile (EPMM) are being actively exploited, both rated 9.8 CVSS and allowing unauthenticated remote code execution. A limited number of customers have been compromised, with attackers potentially gaining access to admin Show more