CVE

CVE-2023-35081

1field note · 0digests

Field notes

Analysis · May 8, 2026 · The Field Notes Desk
Ivanti EPMM has produced a confirmed zero-day every year since 2023. Here's the full chain.
Twelve CVEs. Four exploitation waves. Three years. One product line. A complete accounting of Ivanti EPMM's zero-day history, from the Norwegian government breach to this week's credential chain.