CVE-2026-1281: listed in the CISA KEV catalog
CVE-2026-1281 · CVSS 9.8 CRITICAL · EPSS 82% · KEV 2026-01-29
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.
Is CVE-2026-1281 exploited?
- Listed in the CISA KEV catalog on 2026-01-29.
- Federal remediation due 2026-02-01.
- Past that date by 195 days.
- EPSS puts exploitation in the next 30 days at 82%.
- Public exploit code: packaged in a public tool.
Which products and versions are affected?
No affected package list recorded here yet.
Is there a patch?
No patch identifier recorded here yet.
What PlainSec published about CVE-2026-1281
PlainSec has not published a story about this CVE.
Primary sources
What this record does not say
- No affected package data.
- No patch identifier.
KEV and EPSS are re-checked daily. Record last updated 2026-08-11.