Ivanti Avalanche Remote Control Server RCServlet setProperty 认证绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• CuteHttpFileServer/chfs存在未授权任意文件上传
• PoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code
• PoCCVE-2026-1281: Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection
• PoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code Execution
• PoCCVE-2026-34234: CtrlPanel <= 1.1.1 - Remote Code Execution
• PoCCVE-2026-41679: Paperclip - Remote Code Execution
• PoCCVE-2026-5562: Provectus kafka-ui <=0.7.2 - Remote Code Execution
• PoCCVE-2026-58123: Hermes WebUI < 0.51.788 - Remote Code Execution
• PoCCVE-2026-82222: GiveWP <= 4.16.7.1 - Remote Code Execution
• PoCCVE-2026-86206: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing
• 北京亿赛通科技发展有限责任公司电子文档安全管理系统CDGServer3-client存在前台sql漏洞
• PoCCVE-2026-41042: Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution
• PoCCVE-2026-42596: Gotenberg < 8.31.0 - Server-Side Request Forgery