Critical Vulnerabilities in Ivanti EPMM Exploited

Threat actors are rapidly and widely exploiting two critical zero-day vulnerabilities in Ivanti Endpoint Manager Mobile (CVE-2026-1281 and CVE-2026-1340) to gain unauthenticated remote code execution and persistent control over enterprise mobile device infrastructure, underscoring the urgent need for immediate patching and compromise assessment.