High January 2026 EPMM Security Update
This high-severity Ivanti advisory covers january-2026-epmm-security-update affecting Neurons, EPMM, Endpoint Manager.
Android app · Google Play
Monitor Ivanti Neurons from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
At Ivanti, responsible transparency is a cornerstone of our commitment to customer security and trust.
We have a long-standing commitment to provide information that allows our customers and the broader security ecosystem to take proactive measures to safeguard their environments, while mitigating the risks of a rapidly evolving and highly sophisticated threat landscape.
To this end, we are issuing an important security update addressing vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM). More information can be found in the Security Advisory.
At the time of disclosure, we are aware of a very limited number of customers whose solution has been exploited.
The issue affects only the on-prem EPMM product. It is not present in Ivanti Neurons for MDM, Ivanti’s cloud-based unified endpoint management solution, Ivanti EPM (a similarly named, but different product), Ivanti Sentry, or any other Ivanti products.
We urge all customers using the on-prem EPMM product to promptly install the Security Update.
As we respond to this situation, we are making the following information available to defenders now:
- Our Security Advisory, which describes the nature of the vulnerabilities and detailed remediation instructions for customers.
- A Technical Analysis that includes affected endpoint specifics and log analysis guidance to support investigation and forensics.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · medium-confidence parse· fetched 13 days ago·verify at source
Fixed versions
No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.
Official advisory · medium-confidence parse· fetched 13 days ago·verify at source
Mitigation checklist
- To this end, we are issuing an important security update addressing vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM).
- We urge all customers using the on-prem EPMM product to promptly install the Security Update.
- We have a longstanding commitment to responsibly share information through Ivanti channels, as well as through coordination with government agencies and trusted security partners, to help defenders assess risk, prioritize remediation, and deploy defenses effectively.
- In this case, we determined that early proactive release of technical details concurrent with the patch aligns with responsible disclosure and arms defenders to best mitigate potential exploitation.
Official advisory · medium-confidence parse· fetched 13 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.