CVE-2026-1281

LLM-synthesized narrative grounded in this CVE's description and references.

• Ivanti/Endpoint Manager Mobile7 versions

  cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*+ 6 more

  • cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*range: <=12.5.0.0
  • cpe:2.3:a:ivanti:endpoint_manager_mobile:12.5.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:endpoint_manager_mobile:12.6.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:endpoint_manager_mobile:12.6.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:endpoint_manager_mobile:12.7.0.0:*:*:*:*:*:*:*
  • (no CPE)
  • (no CPE)range: 12.x.1.x RPM

• forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340nvdPatchVendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• CISA gives feds four days to patch Ivanti flaw exploited as zero-day
  BleepingComputer · May 8, 2026
• Ivanti EPMM vulnerability exploited in zero-day attacks (CVE-2026-6973)
  Help Net Security · May 8, 2026
• Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks
  SecurityWeek · May 8, 2026
• Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access
  The Hacker News · May 7, 2026
• Ivanti warns of new EPMM flaw exploited in zero-day attacks
  BleepingComputer · May 7, 2026
• Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)
  watchTowr Labs · Jan 30, 2026