CVE-2025-24799Vulnerability
Reported by 2 independent sources · first reported by GreyNoise · last reported
Last reported 1 month ago
What the reports say
2 reports, newest first · the exact sentence from each-
Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use“Specifically, the actor attempted to exploit CVE-2025-24799, an unauthenticated SQL injection vulnerability in GLPI, using both a PoC and sqlmap to retrieve user information from the database.”
-
Active Ivanti Exploitation Traced to Single Bulletproof IP—Published IOC Lists Point Elsewhere“CVE-2025-24799”
Indicators reported together
named in the same reports- 193.24.123[.]42in 1 report
- 45.129.230[.]38in 1 report
- 198.98.54[.]209in 1 report
- 156.146.45[.]26in 1 report
- 198.98.56[.]220in 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2026-1281, CVE-2026-1340, CVE-2020-1472, CVE-2026-21962, CVE-2025-2479, CVE-2026-24061
Thanks — we review every report.