Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacktron finds another pre-auth RCE variant in Ivanti EPMM

hacktron.ai | vulnerability | #ai-security | #rce | #vulnerability-research | #pre-auth | #ivanti | #mdm | #epmm | #el-injection

Summary

Hacktron identified a new EL injection sink in Ivanti EPMM and used it to demonstrate yet another pre-authentication RCE variant in the mobile device management platform.
Published
Collected

original ↗

Related coverage

vulnerability · idnsec.com
[CVE-2026-93485] Comment2XSS: Zero-Click Pre-Auth XSS to Potential RCE in WordPress Core
An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.
research · idnsec.com
Mitigating RCE Impact Like in OpenAI Hack with Defense-in-Depth
Using HacktronAI's OpenAI Discourse hack disclosure, this article covers sandboxing, runtime protection, and AI-assisted defense to shrink the blast radius of RCE across interconnected apps.
vulnerability · netspi.com
Ivanti Endpoint Manager Mobile (EPMM) [CVE-2026-1281 & CVE-2026-1340]: Overview & Takeaways
Ivanti EPMM has two actively exploited zero-day code injection flaws, CVE-2026-1281 and CVE-2026-1340, letting unauthenticated remote attackers compromise appliances and access sensitive data.
vulnerability · wiz.io
Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild
Wiz details in-the-wild exploitation of Ivanti EPMM: CVE-2025-4427 (auth bypass) plus CVE-2025-4428 (Java EL injection RCE) combine into unauthenticated RCE — despite CVSS scores of 5.3 and 7.2.
research · starlabs.sg
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE
Post-auth RCE in Cisco Smart Software Manager (CSSM): command injection in nginx certificate upload, where openssl checks run via childProcess.execSync. Cisco silently patched it in 10-202608.
research · github.com
[CVE-2024-6100] CyberKimi Benchmarks: Autonomous Exploitation Traces & Evidence
Provides verifiable, transparent evidence of advanced LLMs performing complex, multi-step binary and browser exploitation autonomously under strict ASLR and memory randomization defenses.
back