Ivanti Endpoint Manager - Authentication Bypass

Ivanti Endpoint Manager 2024 SU5 contains an authentication bypass caused by improper access control, letting remote unauthenticated attackers leak stored credential data, exploit requires no special privileges. id: CVE-2026-1603 info: name: Ivanti Endpoint Manager - Authentication Bypass author:...

FreePBX >= 17.0.2.36 && < 17.0.3 - Authenticated Command Injection

FreePBX Endpoint Manager 17.0.2.36 to = 17.0.2.36 && 17.0.3 - Authenticated Command Injection author: th3y severity: critical description: | FreePBX Endpoint Manager 17.0.2.36 to 17.0.3 contains a command injection caused by improper sanitization in filestore module's testconnection checksshconne...

Ivanti EPMM < 12.8.0.0 - Remote Code Execution

Ivanti Endpoint Manager Mobile contains a code injection vulnerability allowing unauthenticated attackers to execute arbitrary code remotely, exploit requires no authentication. id: CVE-2026-1340 info: name: Ivanti EPMM 12.8.0.0 - Remote Code Execution author: 0xAkoko severity: critical...

FreePBX-CVE-2025-57819-CVE-2025-61678

FreePBX-CVE-2025-57819-CVE-2025-61678 Combine CVE-2025-57819 injection SQL par requête empilée et CVE-2025-61678 téléchargement de fichier authentifié dans FreePBX Endpoint Manager pour réaliser une exécution de code à distance RCE. Pour usage éducatif uniquement. Références :...

CVE-2024-29847

CVE-2024-29847 PoC pour la vulnérabilité d'exécution de code à distance par désérialisation de données non fiables dans Ivanti Endpoint Manager AgentPortal CVE-2024-29847 Une analyse des causes racines de la vulnérabilité peut être trouvée sur mon blog :...

freepbx-endpoint-sqli-rce

CVE-2025-57819 — Injection SQL du module Endpoint FreePBX → Exécution de code à distance Résumé FreePBX est l'interface graphique web open-source d'Asterisk PBX, largement déployée dans les environnements téléphoniques d'entreprise. Le module Endpoint Manager expose un gestionnaire AJAX à l'adres...

CVE-2025-57819-poc

CVE-2025-57819 — FreePBX SQLi non authentifiée → RCE Exploit one-shot pour l'injection SQL non authentifiée du Endpoint Manager de FreePBX CVE-2025-57819, chaînée en exécution de code à distance via la table cronjobs de FreePBX. Réservé aux tests de sécurité autorisés / CTF. Vulnérabilité Le...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcard

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcard endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC pat...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForSingleFile

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForSingleFile endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC...

CVE-2025-57819

CVE-2025-57819 - Injection SQL non authentifiée vers exécution de code à distance dans FreePBX 16 Endpoint Manager Injection SQL empilée non authentifiée dans le module Endpoint Manager de FreePBX admin/ajax.php, paramètre brand, CVE-2025-57819, affectant le framework FreePBX --vhost --root --cmd...

FreePBX-SQLi-Exploit-Privilege-escalation

FreePBX : De l'injection SQL non authentifiée au shell root CVE-2025-57819 • FreePBX 16.0.40.7 • HTB Connected 📋 Résumé Exécutif Ce walkthrough documente le compromis complet de la machine HTB Connected. La chaîne d'attaque commence par une injection SQL non authentifiée dans FreePBX, qui est...

CVE-2025-57819

CVE-2025-57819 Aperçu de cette vulnérabilité, extrait de @jfinstrom ici Vers le 2025-08-21, plusieurs systèmes FreePBX ont commencé à afficher des erreurs et des compromissions ont ensuite été confirmées. L'éditeur Sangoma/FreePBX Security Team a publié un avis de sécurité le 2025-08-26 exhortant...

Ivanti Endpoint Manager Mobile < 12.8.0.4 / 12.9.x < 12.9.0.2 / 12.10.0.0 Privilege Escalation (CVE-2026-18851)

The version of Ivanti Endpoint Manager Mobile, formerly MobileIron Core, running on the remote host is prior to 12.8.0.4, or 12.9.x prior to 12.9.0.2. It is, therefore, affected by a privilege escalation vulnerability: - Missing authorization in Ivanti Endpoint Manager Mobile before version...

Ivanti Endpoint Manager Mobile - Unauthenticated Remote Code Execution

An authentication bypass in Ivanti Endpoint Manager Mobile allowing attackers to access protected resources without proper credentials. This leads to unauthenticated Remote Code Execution via unsafe userinput in one of the bean validators which is sink for Server-Side Template Injection. id:...

CVE-2026-18851

Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...

CVE-2026-18851

Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...

EUVD-2026-72792

Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...

CVE-2026-18851

CVE-2026-18851 is a missing authorization vulnerability in Ivanti Endpoint Manager Mobile affecting versions before 12.10.0.0 , 12.9.0.2 , and 12.8.0.4 . The flaw allows a remote authenticated attacker to escalate privileges to admin , resulting in high impact on confidentiality, integrity, and a...

PT-2026-87092

Ivanti Patches 10 Flaws Across EPMM, Neurons ITSM and Sentry Including Unauthenticated RCE https://t.co/gNAWhXgUsO "The EPMM advisory addresses CVE-2026-18851, a high-severity missing authorization vulnerability with a CVSS score of 8.8. Classified as CWE-862…"...

Ivanti EPM Cloud Services Appliance Code Injection

Ivanti EPM Cloud Services Appliance CSA before version 4.6.0-512 is susceptible to a code injection vulnerability because it allows an unauthenticated user to execute arbitrary code with limited permissions nobody. id: CVE-2021-44529 info: name: Ivanti EPM Cloud Services Appliance Code Injection...