Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Ivanti Endpoint Manager Mobile (EPMM) [CVE-2026-1281 & CVE-2026-1340]: Overview & Takeaways

netspi.com | vulnerability | #rce | #zero-day | #ivanti | #code-injection | #epmm | #cve-2026-1281 | #cve-2026-1340

Summary

Ivanti EPMM has two actively exploited zero-day code injection flaws, CVE-2026-1281 and CVE-2026-1340, letting unauthenticated remote attackers compromise appliances and access sensitive data.
Published
Collected

original ↗

Related coverage

vulnerability · wiz.io
Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild
Wiz details in-the-wild exploitation of Ivanti EPMM: CVE-2025-4427 (auth bypass) plus CVE-2025-4428 (Java EL injection RCE) combine into unauthenticated RCE — despite CVSS scores of 5.3 and 7.2.
vulnerability · hacktron.ai
Hacktron finds another pre-auth RCE variant in Ivanti EPMM
Hacktron identified a new EL injection sink in Ivanti EPMM and used it to demonstrate yet another pre-authentication RCE variant in the mobile device management platform.
blog · netspi.com
Q1 2026 Critical Vulnerability Roundup: Mitigating Risk
A Q1 2026 roundup of top exploited criticals, including unauthenticated RCE in the Oracle WebLogic Server Proxy Plugin and an Ivanti EPMM auth bypass plus path traversal combo (CVE-2026-1281/1340).
tool · github.com
Comment2Shell: Zero-Click Pre-Auth RCE Exploit Kit for WordPress (CVE-2026-93485)
Affects all WordPress installations from version 4.7.0 through 7.1.0 without requiring credentials or interaction beyond opening a post. Administrators should verify upgrading to 7.1.1 or backported releases, and monitor server logs for suspicious comment payloads and unexpected plugin uploads.
research · starlabs.sg
Dirty Cert: Cisco Smart Software Manager's Silently Patched RCE
Post-auth RCE in Cisco Smart Software Manager (CSSM): command injection in nginx certificate upload, where openssl checks run via childProcess.execSync. Cisco silently patched it in 10-202608.
vulnerability · netspi.com
CVE-2026-0300 Palo Alto Networks PAN-OS Buffer Overflow Overview & Takeaways
CVE-2026-0300 is a pre-auth buffer overflow in the PAN-OS User-ID Authentication Portal giving unauthenticated root RCE on PA-Series and VM-Series firewalls, already exploited in the wild.
back