Back Cybersecuritydive

Ivanti EPMM exploitation widespread as governments, others targeted

Cybersecuritydive • February 10, 2026

Security researchers said threat activity targeting the vulnerabilities is accelerating, but in targeted ways. “We've detected over 600 individual IPs ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Widespread Exploitation of Ivanti EPMM Vulnerability CVE-2026-1281 Following the disclosure of CVE-2026-1281, a critical pre-authentication vulnerability in Ivanti EPMM, there has been a significant increase in exploitation attempts. Security researchers have reported targeting activities affecting various organizations, including government entities, with over 600 individual IP addresses involved in these attacks. 2 sources 22

Extracted Entities

Platforms (1)

Ivanti EPMM