European Commission & Dutch authorities hit via Ivanti EPMM zero-days
Teaser from the source
February 2026: European Commission and Dutch DPA/Judicial Council confirmed breaches through critical Ivanti Endpoint Manager Mobile zero-days. Dutch incident exposed work contact data; Commission said it contained its breach within nine hours.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchLinked advisories
- CVE-2026-1340Ein Code-Injektion in Ivanti Endpoint Manager Mobile, die es Angreifern ermöglicht, eine unauthentifizierte Remote-Code-Ausführung zu erreichen.
- CVE-2026-1340Security Advisory 2026-001 — Critical vulnerabilities in Ivanti EPMM
- CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
- CVE-2026-1340January 2026 EPMM Security Update
Affected vendors and products
More on authorities
Other advisories
- HighCVE-2026-111765A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix
- HighCVE-2026-111765A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix
- Not ratedosv:CVE-2026-111765A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix
- MediumCVE-2026-68097ksmbd: validate ACE size against SID sub-authorities
- Not ratedosv:CVE-2026-68097ksmbd: validate ACE size against SID sub-authorities
- HighCVE-2026-42011A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs)…
- MediumCVE-2026-41393OpenClaw before 2026.3.31 contains a wide-area discovery vulnerability allowing arbitrary tailnet peers to be accepted as DNS authorities. Attackers with sam…
- HighCVE-2026-31611ksmbd: require 3 sub-authorities before reading sub_auth[2]
Other news entries
- Kingdom Come: Deliverance studio Warhorse hit by cyberattack, company systems and data accessedBreachpwn.watch
- Authorities disrupt nearly 11,000 cybercrime networks in AfricaNewsBleepingComputer
- Google, Mozilla revoke eMudhra intermediates after private key compromiseNewsCSO Online
- Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fineNewsCSO Online
- Police arrests 95 suspects in international CSAM crackdown actionNewsBleepingComputer
- As phishing-as-a-service goes industrial, Microsoft takes down a marketplace behind 1 billion messagesNewsCSO Online
- ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group MembersNewsThe Hacker News
- Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary ShutdownNewsThe Hacker News
Source: https://pwn.watch/i/eu-dutch-ivanti-epmm-zero-day-breach
ID