Exploited in the Wild: Critical Ivanti EPMM RCE Flaws (CVSS 9.8) Under Attack

Ivanti has issued an urgent security advisory that two critical unauthenticated RCE vulnerabilities (CVE-2026-1281 and CVE-2026-1340, CVSS 9.8) in Endpoint Manager Mobile (EPMM) are being actively exploited against a limited number of customers; successful exploitation could fully compromise mobile device management infrastructure (allowing malicious app deployment, device wipes, or data theft). Ivanti indicates the flaws are specific to EPMM, recommends immediate patching and revocation/regeneration of affected certificates, and notes the difficulty but potential risk around decrypting private keys stored in the Core database.