CyberzSOC

An attacker could chain those vulnerabilities to achieve unauthenticated remote code execution on the vulnerable device. These vulnerabilities have been exploited in a [New] The analysis conducted by WatchTowr [3] provides significantly more information than the advisory issued by Ivanti in two key aspects: that they are related to third-party libraries. CERT-EU strongly recommends applying the update as soon as possible, prioritising Internet The vulnerability CVE-2025-4427, with a CVSS score of 5.3, is an authentication bypass in Ivanti Endpoint Manager Mobile (EPMM) allowing attackers to access protected resources without proper credentials. The vulnerability CVE-2025-4428, with a CVSS score of 7.2, is a remote code execution vulnerability in Ivanti Endpoint Manager Mobile (EPMM) allowing attackers to execute arbitrary code These two vulnerabilities could be chained to achieve unauthenticated remote code execution [New] WatchTowr’s further examination of the EPMM fix suggests that assigning two separate CVEs may be unnecessary [3]. The application’s design appears to allow for the exploitation of both vulnerabilities without requiring a valid login, implying that they could be considered as a single, more severe vulnerability - potentially critical in nature.