THREAT OPS › Threat News › Security advisory: Pre-authentication SYSTEM RCE in iMonnit Express 4.0.5.5 (Monnit / iMonnit)
Security advisory: Pre-authentication SYSTEM RCE in iMonnit Express 4.0.5.5 (Monnit / iMonnit)
<p>Posted by disclosure via Fulldisclosure on Aug 17</p>0day Rubbish Research Team is publicly disclosing a vulnerability in iMonnit Express 4.0.5.5 (Monnit / iMonnit). The <br /> research is published and a proof-of-concept is available.<br /> <br /> Pre-authentication SYSTEM RCE (CVSS 9.8, pre-authentication)<br /> <br /> iMonnit Express 4.0.5.5 is an ASP.NET Core application running as a Window
MITRE ATT&CK techniques
- Windows ServiceT1543.003
Indicators of compromise
- 4.0.5.5ipv4
Original source: https://seclists.org/fulldisclosure/2026/Aug/54