Ivanti Avalanche Remote Control Server RCServlet setProperty 认证绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://isecurity.huawei.com/security/wiki/ips/detail?threatId=731710

Related Vulnerabilities

• 畅捷通T+ERP系统SelectBackupFileOnServer接口处存在目录遍历漏洞
• PoCCVE-2026-26216: Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter
• PoCCVE-2026-40281: Gotenberg <= 8.30.1 - Remote Code Execution
• PoCCVE-2026-86242: Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch
• PoCserverless-framework-config-exposure: Serverless Framework - Configuration Exposure
• PoCCRMEB /api/remote_register 权限绕过漏洞
• PoCCVE-2025-62593: Ray < 2.52.0 - Remote Code Execution
• PoCCVE-2025-68273: Signal K Server <= 2.18.0 - Information Disclosure
• PoCCVE-2026-61560: GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access
• PoCmcp-streamable-http-exposure: MCP Streamable HTTP Server - Unauthenticated Initialize
• PoCCVE-2026-49060: Hippoo Mobile App for WooCommerce - Broken Access Control
• PoCpowerdns-monitor-exposure: PowerDNS Authoritative Server Monitor - Unauthenticated Exposure
• PoCCVE-2026-1340: Ivanti EPMM < 12.8.0.0 - Remote Code Execution