watchTowr @watchTowr@infosec.exchange
Public

Someone knows Bash disgustingly well, and we love it.

Here's our analysis of the Ivanti EPMM Pre-Auth RCE vulnerabilities - CVE-2026-1281 & CVE-2026-1340.

This research fuels our technology, enabling our clients to accurately determine their exposure.

labs.watchtowr.com/someone-kno

Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)

When Ivanti removed the embargoes from CVE-2026-1281 and CVE-2026-1340 - actively exploited pre-auth Remote Command Execution vulnerabilities in Ivanti’s Endpoint Manager Mobile (EPMM) solution - we sighed with relief. Clearly, the universe had decided to continue mocking Secure-By-Design signers right on schedule - every January. Welcome back to another

labs.watchtowr.com · watchTowr Labs

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://infosec.exchange/users/watchTowr/statuses/115984950682218084 on your instance and quote it. (Note that quoting is not supported in Mastodon.)