Dutch Authorities Confirm Ivanti Zero-Day Exploit Exposed Employee Contact Data

Multiple European government agencies (including the Netherlands' Data Protection Authority and Council for the Judiciary, the European Commission, and Finland's Valtori) were impacted by active exploitation of Ivanti EPMM zero‑day RCE vulnerabilities (CVE‑2026‑1281, CVE‑2026‑1340, CVSS 9.8). Attackers accessed work-related information such as names, business email addresses, telephone numbers and device details; Ivanti confirmed limited zero‑day exploitation and patches were released and applied.