--- title: Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again description: Two critical RCE vulnerabilities (CVE-2026-1281 and CVE-2026-1340, both CVSS 9.8) in Ivanti's Endpoint Manager Mobile (EPMM) were disclosed on Jan. 29, with... canonical: https://daily.dev/posts/ivanti-epmm-zero-day-bugs-spark-exploit-frenzy-again-50ilhvrp3 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again | daily.dev og:description: Two critical RCE vulnerabilities (CVE-2026-1281 and CVE-2026-1340, both CVSS 9.8) in Ivanti's Endpoint Manager Mobile (EPMM) were disclosed on Jan. 29, with... og:url: https://daily.dev/posts/ivanti-epmm-zero-day-bugs-spark-exploit-frenzy-again-50ilhvrp3 og:image: https://api.daily.dev/og/posts/50iLHvRp3.png og:image:alt: Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again **[Dark Reading](https://daily.dev/sources/dr)** · 7 min read · 0 upvotes · 0 comments ## Summary Two critical RCE vulnerabilities (CVE-2026-1281 and CVE-2026-1340, both CVSS 9.8) in Ivanti's Endpoint Manager Mobile (EPMM) were disclosed on Jan. 29, with active exploitation already underway. Within days, the European Commission, Finland's Valtori, and two Dutch government agencies were breached. A public proof-of-concept exploit accelerated attack activity, with Greynoise tracing 83% of a subsequent exploitation spike to a single bulletproof hosting IP. Security experts urge organizations to move beyond 'patch and pray,' minimize public interfaces, enforce pre-authentication controls, and treat perimeter systems as Tier-0 critical infrastructure. Despite Ivanti's repeated vulnerability history, its deep enterprise entrenchment makes replacement difficult, and competitors offer little better track record. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday](https://daily.dev/posts/cisa-orders-feds-to-patch-exploited-ivanti-epmm-flaw-by-sunday-q37rvz2h1) · BleepingComputer · 1 upvotes · 0 comments - [CISA warns of actively exploited Ivanti EPM and Cisco SD-WAN flaws](https://daily.dev/posts/cisa-warns-of-actively-exploited-ivanti-epm-and-cisco-sd-wan-flaws-h3npt1jng) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#zero-day](https://daily.dev/tags/zero-day) [View this post on daily.dev](https://daily.dev/posts/ivanti-epmm-zero-day-bugs-spark-exploit-frenzy-again-50ilhvrp3) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again","url":"https://daily.dev/posts/ivanti-epmm-zero-day-bugs-spark-exploit-frenzy-again-50ilhvrp3","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ivanti-epmm-zero-day-bugs-spark-exploit-frenzy-again-50ilhvrp3"},"datePublished":"2026-02-23T22:51:32.180Z","dateModified":"2026-02-26T17:15:05.124Z","description":"Two critical RCE vulnerabilities (CVE-2026-1281 and CVE-2026-1340, both CVSS 9.8) in Ivanti's Endpoint Manager Mobile (EPMM) were disclosed on Jan. 29, with...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/00a1187f6180704bf65a2efe3a82e815?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/00a1187f6180704bf65a2efe3a82e815?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Dark Reading","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dark Reading","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/dr","url":"https://daily.dev/sources/dr"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ivanti-epmm-zero-day-bugs-spark-exploit-frenzy-again-50ilhvrp3","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,zero-day","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dark Reading","item":"https://daily.dev/sources/dr"},{"@type":"ListItem","position":3,"name":"Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again"}]} ```