References https://www.cgu.edu.tw/cgus/Subject/Detail/77988?nodeId=19003 https://avd.aliyun.com/detail?id=AVD-2026-1602 https://www.nics.nat.gov.tw/core_business/information-security_information_sharing/Vulnerability_Alert_Announcements/4c9c6e4a-33a8-4723-95b1-30b8a02b4d71/ https://www.cnvd.org.cn/flaw/show/CNVD-2025-28682 https://www.nsfocus.net/vulndb/105074 https://www.dreamjtech.com/26526/ https://xxhzx.web.hebust.edu.cn/wlaq/8c3e8eaea2124031938f9d4e9be5600c.htm https://vulnerability.circl.lu/vuln/cnvd-2025-24263 https://www.tenablecloud.cn/plugins/was/114433 https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-October-2025 https://hub.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022 https://www.zerodayinitiative.com/advisories/ZDI-25-945/ https://www.sentinelone.com/vulnerability-database/cve-2024-8191/ https://research.splunk.com/web/e20564ca-c86c-4e30-acdb-a8486673426f/ https://horizon3.ai/attack-research/attack-blogs/cve-2024-29824-deep-dive-ivanti-epm-sql-injection-remote-code-execution-vulnerability/ https://nvd.nist.gov/vuln/detail/cve-2024-29824 https://www.tenable.com/plugins/nessus/197921 https://www.cybersecuritydive.com/news/ivanti-endpoint-manager-hackers-attack/728814/ https://app.opencve.io/cve/?product=endpoint_manager&vendor=ivanti https://www.fortiguard.com/encyclopedia/ips/56195 https://hub.ivanti.com/s/article/KB-Security-Advisory-EPM-May-2024
Related VulnerabilitiesPoCCVE-2026-1281: Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞PoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code ExecutionPoCccm-detect: Clear-Com Core Configuration Manager Panel - Detect智慧物联网综合服务平台ListFileManager存在目录枚举漏洞WP User Manager /profile/admin/about 文件包含漏洞(CVE-2026-9290)SteVe /steve/manager/signin 默认口令漏洞PoCCVE-2008-2052: Bitrix Site Manager 6.5 - Open RedirectPoCCVE-2026-10520: Ivanti Sentry - OS Command InjectionPoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File InclusionWP User Manager /profile/admin/about 本地文件包含漏洞