coldbraid

CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM)

Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution.

CVSS
not scored

CWE-94

On CISA’s exploited list

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Added
2026-01-29
Federal patch deadline
2026-02-01
Ransomware use
not known