{"uuid": "108bf3c5-0f2d-46cf-9728-7ce3db525f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4427", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/689", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nMalicious Listener for Ivanti Endpoint Mobile Management Systems\nMalware Analysis at a Glance Executive Summary The Cybersecurity and Infrastructure Security Agency (CISA) obtained two sets of malware from an organization compromised by cyber threat actors exploiting CVE-2025-4427 and CVE-2025-4428 in Ivanti Endpoint Manager Mobile (Ivanti EPMM). Each set contains loaders for malicious listeners that enable cyber threat actors to run arbitrary code on the compromised server. Affected Products Ivanti EPMM, versions 11.12.0.4 and prior, 12.3.0.1 and prior, 12.4.0.1 and prior, and 12.5.0.0 and prior. (Ivanti provided a patch and disclosed the vulnerabilities o\n\nSource: us-cert.cisa.gov \u2014 link\n#cybersecurity #infosec", "creation_timestamp": "2026-08-09T04:19:14.171053Z"}