Signalis
sign in--:--:--UTC
CVEs

CVE-2026-1281

exploited in the wild☆ pin
CVSS
9.9
Reports
6
First seen
Jan 30, 2026
Last seen
May 8, 2026
Affected product

Ivanti Endpoint Manager Mobile

Associated actors

APT28 ×2Black Axe ×1Contagious Interview ×1Diesel Vortex ×1GrayBravo ×1Kimwolf ×1Lotus Blossom ×1Mercenary Akula ×1Mustang Panda ×1NoName057(16) ×1PHALT#BLYX ×1Qilin ×1Salt Typhoon ×1Sandworm ×1Scattered Lapsus Hunters ×1Storm-1516 ×1TGR-STA-1030 ×1UAT-8837 ×1UNC2814 ×1UNC6201 ×1

Recent reports

Critical

Multiple Vulnerabilities in Ivanti Endpoint Manager Mobile Being Exploited in the Wild

GovCERT.HKHigh

CERT-EU Cyber Brief February 2026: APT28, China espionage, AI supply-chain attacks, Qilin ransomware

CERT-EU Threat IntelCritical

January 2026 CVE Landscape: 23 Critical Vulnerabilities, APT28 Exploits Microsoft Office Zero-Day

Recorded Future InsiktHigh

CERT-EU Cyber Brief January 2026 – Espionage, Ransomware, and Critical Vulnerabilities

CERT-EU Threat IntelCritical

Critical vulnerabilities in Ivanti EPMM (CVE-2026-1281, CVE-2026-1340)

CERT-EU AdvisoriesCritical

Multiple Remote Code Execution Vulnerabilities in Ivanti Endpoint Manager Mobile

GovCERT.HK

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans