Add CVE-2026-1281: Ivanti EPMM Pre-Authentication RCE

[jarvis-survives]

PR Information

• Added template for CVE-2026-1281: Ivanti Endpoint Manager Mobile (EPMM) Pre-Authentication Remote Code Execution
• Critical severity (CVSS 9.8) - code injection via unsanitized input in the FOB download endpoint
• Uses interactsh for OOB DNS verification of command execution
• Based on watchTowr Labs research and advisory
• References: https://labs.watchtowr.com/someone-knows-bash-far-too-well-and-we-love-it-ivanti-epmm-pre-auth-rces-cve-2026-1281-cve-2026-1340/
• Closes Ivanti Endpoint Manager Mobile (EPMM) RCE (CVE-2026-1281 & CVE-2026-1340) #15145

Template validation

• Template validated against the PoC from watchTowr Labs advisory
• Uses OOB DNS interaction to confirm code execution without destructive impact
• Returns 404 status as expected per advisory documentation