---
id: 7026
title: "Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/ivanti-epmm-rce-vulnerability-chain-cve-2025-4427-cve-2025-4428"
published_at: "2025-05-20T18:13:13Z"
tags: ["rce", "exploitation", "vulnerability", "ivanti", "epmm", "cve-2025-4427", "cve-2025-4428"]
phying_url: "https://phying.com/item/7026"
lang: en
---

# Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild

## Summary

Wiz details in-the-wild exploitation of Ivanti EPMM: CVE-2025-4427 (auth bypass) plus CVE-2025-4428 (Java EL injection RCE) combine into unauthenticated RCE — despite CVSS scores of 5.3 and 7.2.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-05-20T18:13:13Z
- **Original:** https://www.wiz.io/blog/ivanti-epmm-rce-vulnerability-chain-cve-2025-4427-cve-2025-4428
- **Phying News:** https://phying.com/item/7026