Ivanti’s Endpoint Manager Mobile (EPMM) contains a critical vulnerability chain that has been actively abused. The vulnerabilities, initially disclosed by Ivanti on March 13th, 2025, combine an authentication bypass (CVE-2025-4427) and a remote code execution flaw (CVE-2025-4428) to create a critical attack vector that allows unauthenticated attackers to execute arbitrary code on vulnerable systems. While […]
The post Ivanti EPMM 0-Day RCE Vulnerability Under Active Attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.