Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild

wiz.io | vulnerability | #rce | #exploitation | #vulnerability | #ivanti | #epmm | #cve-2025-4427 | #cve-2025-4428

Summary

Wiz details in-the-wild exploitation of Ivanti EPMM: CVE-2025-4427 (auth bypass) plus CVE-2025-4428 (Java EL injection RCE) combine into unauthenticated RCE — despite CVSS scores of 5.3 and 7.2.
Published
Collected

original ↗

Related coverage

  1. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  2. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)
  3. Critical Vulnerabilities in Ivanti Exploited in-the-Wild: everything you need to know (wiz.io)
  4. Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise (wiz.io)
  5. Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603) (wiz.io)
  6. CVE-2025-0282 and CVE-2025-0283: Critical Ivanti 0days Exploited in the Wild (wiz.io)

back