Jan 302026 Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released Ivanti released fixes for two actively exploited EPMM zero-day RCE flaws, including CVE-2026–1281 added to CISA’s KEV, affecting versions before 12.8.