Indicator of Compromise

CVE-2026-1281

CVE Seen in 6 reports Watch this →

A CVE identifier for a specific software vulnerability referenced in this reporting.

Seen in these reports

PAN-OS GlobalProtect Exploitation Shows VPN Access Needs Log Review, Not Just Patching

PAN-OS Captive Portal Zero-Day Shows Why Internet-Facing Edge Devices Need Immediate Review

Unit 42 Exposes Active Exploitation of BeyondTrust CVE-2026-1731 with VShell and SparkRAT Backdoors

Iconics Suite SCADA Vulnerability Enables Denial-of-Service Through Privileged File Operations

Ivanti Patches Two Critical EPMM Zero-Day Vulnerabilities Under Active Exploitation

Ivanti EPMM Zero-Days Actively Exploited: Pre-Auth RCE via Bash Arithmetic Expansion

Related indicators

Indicators that appear alongside this one in the same reporting, often shared infrastructure or the same campaign.

CVE-2026-1340 CVE-2023-33538 CVE-2025-0921 CVE-2025-14847 CVE-2025-23304 CVE-2025-55182 CVE-2025-66478 CVE-2026-0257 CVE-2026-0300 CVE-2026-1731 CVE-2026-22584 CVE-2026-31431 12[.]8[.]0[.]0 0ecc867ce916d01640d76ec03de24d1d23585eb582e9c48a0364c62a590548ac104[.]207[.]144[.]15412[.]5[.]1[.]012[.]6[.]1[.]012[.]7[.]0[.]0123aabf796106cfb2ab40cbbd43ba5b44fd937f1a5856e0a95640ba6f9d71843134[.]122[.]13[.]34136[.]0[.]8[.]48138[.]0[.]0[.]0138[.]197[.]14[.]95142[.]111[.]152[.]50144[.]172[.]103[.]200146[.]19[.]216[.]119146[.]19[.]216[.]120146[.]19[.]216[.]125146[.]70[.]100[.]69149[.]104[.]66[.]84155[.]2[.]215[.]64178[.]128[.]212[.]209179[.]43[.]146[.]42179[.]43[.]172[.]213185[.]195[.]232[.]139198[.]12[.]106[.]60202[.]144[.]192[.]4723[.]128[.]228[.]623[.]162[.]40[.]18737[.]19[.]221[.]180

The House-Of-L Brief.