Threats Tagged 'cve-2026-1281'
View all threats tagged with 'cve-2026-1281'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-1281'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-1281 is a critical code injection vulnerability in Ivanti Endpoint Manager Mobile that allows unauthenticated remote attackers to execute arbitrary code. This vulnerability arises from improper control over code generation (CWE-94), enabling attackers to inject malicious code without requiring authentication or user interaction. The flaw affects the Ivanti Endpoint Manager Mobile product and has a CVSS v3.1 score of 9.8, indicating a critical severity with high impact on confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the ease of exploitation and potential damage make this a significant threat. Organizations using this product should prioritize patching once available and implement network-level protections to mitigate risk. Countries with large deployments of Ivanti products, especially in North America, Europe, and parts of Asia, are most likely to be affected. Immediate attention is required to prevent potential compromise and lateral movement within enterprise environments. Join the discussion | CVE Database V5 | 01/29/2026, 21:31:17 UTC Added: 01/29/2026, 21:57:49 UTC |
Showing 1 to 1 of 1 result