Ivanti patches five vulnerabilities in EPMM, one actively being exploited

Ivanti patched five vulnerabilities in Endpoint Manager Mobile (EPMM), including one already being actively exploited.

The issues include authenticated privilege escalation, unauthenticated remote code execution, certificate impersonation, and sensitive data exposure.

Dutch authorities rated the advisory high priority and warned that public proof-of-concept code is likely to appear soon.

Organizations using EPMM are urged to patch immediately to reduce the risk of broader compromise.