🚨 Active exploitation confirmed for a new unauthenticated RCE in Ivanti - CVE-2026-1281

[pentesttools@infosec.exchange]

Active exploitation confirmed for a new unauthenticated RCE in Ivanti - CVE-2026-1281

With a CVSS of 9.8 and part of CISA KEV, attackers need *zero* credentials to use this CVE and exploit legacy bash scripts and gain root access.

So we updated Pentest-Tools.com to help you confirm the risk:

Network Scanner - detects exposed Ivanti EPMM instances on your perimeter.

Sniper Auto-Exploiter - safely demonstrates the RCE to prove the risk is real (and urgent).

Find more info for your rapid response flows here: https://pentest-tools.com/vulnerabilities-exploits/ivanti-endpoint-manager-mobile-remote-code-execution_28881

#offensivesecurity #ethicalhacking #infosec #cybersecurity #vulnerabilitymanagement