CRITICALCVSS 9.8Actively exploited · CISA KEV since 2026-01-29Vulnerability

CVE-2026-1281

Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution.

Properties

Euvd product
Endpoint Manager Mobile
Vulnerability name
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
First seen
2026-10-07T18:00:12+00:00
Cvss score
9.8
Epss score
0.98688
Last seen
2026-10-19T12:00:27+00:00
Due date
2026-02-01
Euvd assigner
ivanti
Retrieved at
2026-10-21T01:24:49+00:00
Exploited euvd since
2026-01-29T00:00:00+00:00
Src batch id
epss_history-20261020T103617Z-728ddd
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2026-01-29
Score
9.8
Euvd base score version
3.1
Fetched at
2026-10-20T10:36:20+00:00
Euvd vendor
Ivanti
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In Signal since
initial import (Sep 2026)
Euvd base score
9.8

Related Entities (16)

MENTIONED_IN (8)

→[Campaign]Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution
→[Campaign]Threat Overview: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Being Exploited in Production Environments (Updated September 30)
→[Campaign]A Deep Dive Into Attempted Exploitation of CVE-2023-33538
→[Campaign]Unnamed campaign (ID 69a9…)
→[Campaign]Critical Vulnerabilities in Ivanti EPMM Exploited
→[Campaign]Unnamed campaign (ID 6989…)
→[Campaign]MuddyWater Exposed: Inside an Iranian APT operation
→[Campaign]Tenant from Hell: Prometei's Unauthorized Stay in Your Windows Server

AFFECTS_PRODUCT (5)

→[Product]cpe:2.3:a:ivanti:endpoint_manager_mobile:12.6.0.0:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:ivanti:endpoint_manager_mobile:12.7.0.0:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:ivanti:endpoint_manager_mobile:12.6.1.0:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:ivanti:endpoint_manager_mobile:12.5.1.0:*:*:*:*:*:*:*
→[Product]cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*

DESCRIBES (1)

←[KEVEntry]Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

HAS_WEAKNESS (1)

→[Weakness]Improper Control of Generation of Code ('Code Injection')

INVOLVES (1)

←[Signal]kev_added · 2026-01-29

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-1281 (CVSS 9.8) — Ninja Signal Threat Intelligence | Ninja Signal