Skip to main content
VulnerabilityPublished

Ivanti Patches Exploited EPMM Zero-Days

Source SecurityWeek

0
Severity
Critical

Rated Critical by SecurityWeek

Data as of 2 Feb 2026, 08:48 UTC

What to do

AI-suggested

Organizations should immediately monitor Ivanti’s official channels for detailed advisories and patches related to these zero-day vulnerabilities and prioritize patch deployment as soon as updates are available. Until patches are applied, restrict network access to Ivanti EPMM management interfaces by implementing strict firewall rules and network segmentation to limit exposure to trusted administrative networks only. Employ multi-factor authentication and strong access controls for all management consoles to reduce the risk of unauthorized access. Conduct thorough audits of existing EPMM deployments to identify any signs of compromise or suspicious activity. Enhance logging and monitoring around EPMM systems to detect anomalous behavior indicative of exploitation attempts. Consider deploying intrusion detection/prevention systems (IDS/IPS) with signatures tuned for Ivanti EPMM vulnerabilities once available. Educate IT and security teams on the potential impact and exploitation methods to improve incident response readiness. Finally, review and update incident response plans to include scenarios involving mobile device management compromise.

Description

The critical-severity vulnerabilities could allow unauthenticated attackers to execute arbitrary code remotely. The post Ivanti Patches Exploited EPMM Zero-Days appeared first on SecurityWeek .

References

Community reviews

Loading reviews…