Discovered by Redline Cyber Security researcher Bryan Smith, CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM (formerly MobileIron) server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1.

We discovered a Zero Day in Trux Waste Management Software (CVE-2024-22734), revealing a hardcoded AES Key-IV vulnerability, and through coordinated disclosure worked with vendor to for a remediation