CVE-2026-1340: Ivanti EPMM < 12.8.0.0 - Remote Code Execution
HoneyLabs honeypots recorded 38 probes matching CVE-2026-1340 from 10 distinct source IP addresses in the last 7 days. Severity is rated critical.
This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2026-04-08.
Request paths that identify it
- /mifs/user/login.jsp
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 172.236.28.161 | 11 | Akamai Connected Cloud | United Kingdom |
| 97.107.138.210 | 11 | Akamai Connected Cloud | United States |
| 50.116.58.253 | 7 | Akamai Connected Cloud | United States |
| 172.105.109.85 | 3 | Akamai Connected Cloud | Canada |
| 134.209.222.5 | 1 | DigitalOcean, LLC · commercial scanner: BinaryEdge | United States |
| 137.184.77.90 | 1 | DigitalOcean, LLC · commercial scanner: BinaryEdge | United States |
| 138.197.206.208 | 1 | DigitalOcean, LLC · commercial scanner: BinaryEdge | United States |
| 165.232.63.91 | 1 | DigitalOcean, LLC · commercial scanner: BinaryEdge | United States |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS63949 | Akamai Connected Cloud | 33 | 5 |
| AS14061 | DigitalOcean, LLC | 5 | 5 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 24 |
| United Kingdom | 11 |
| Canada | 3 |
Captured requests
- /mifs/user/login.jsp
HTTP client fingerprints
- b11cun030_00040012_13ee3d34
- b11cun040_00040013_608dab68
- b11cun030_00040012_f6d8d797
CVE report
CVE report
Open a specific CVE from the CVE tracker.