Security News Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released TheHackerNews Daniel Bender 29 Jan 2026 Ivanti released fixes for two actively exploited EPMM zero-day RCE flaws, including CVE-2026-1281 added to CISA’s KEV, affecting versions before 12.8.