HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

CVE-2026-1340: Ivanti EPMM < 12.8.0.0 - Remote Code Execution

HoneyLabs honeypots recorded 13 probes matching CVE-2026-1340 from 13 distinct source IP addresses in the last 7 days. Severity is rated critical.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

  • /mifs/user/login.jsp

Addresses probing it

Source IPProbesNetworkCountry
143.110.134.1391DigitalOcean, LLCUnited States
165.227.23.541DigitalOcean, LLCUnited States
138.68.10.541DigitalOcean, LLCUnited States
173.255.206.2201Akamai Connected CloudUnited States
159.223.185.621DigitalOcean, LLCUnited States
138.197.173.1371DigitalOcean, LLCCanada
138.68.237.1311DigitalOcean, LLCUnited States
97.107.137.2451Akamai Connected CloudUnited States

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC99
AS63949Akamai Connected Cloud44

Captured requests

  • /mifs/user/login.jsp

HTTP client fingerprints (JA4H)

  • ge11nn0300_dedeb29cc523

CVE report

CVE report

Open a specific CVE from the CVE tracker.