watchTowr Labs (@labs.watchtowr.com.web.brid.gy)

Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340) When Ivanti removed the embargoes from CVE-2026-1281 and CVE-2026-1340 - actively exploited pre-auth Remote Command Execution vulnerabilities in Ivanti’s Endpoint Manager Mobile (EPMM) solution - we sighed with relief.Clearly, the universe had decided to continue mocking Secure-By-Design signers right on schedule - every January. <figure class="kg-card kg-image-card"><img alt="alt" class="kg-image" height="606" src="https://labs.watchtowr.com/content/images/2026/01/image-19.png" width="1080" /></figure>Welcome back to https://labs.watchtowr.com/someone-knows-bash-far-too-well-and-we-love-it-ivanti-epmm-pre-auth-rces-cve-2026-1281-cve-2026-1340/