Reported by 3 outlets
Ivanti September 2026 security advisory: EPMM, ITSM, Sentry vulnerabilities
Why this score
- Breadth
- 1.50 / 2.0 · 3 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.38 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Ivanti security advisory (AV26-897)
malware.news · 35d ago · September 8th, 2026
Serial Number: AV26-897 Date: September 8, 2026 As of September 8, 2026, Ivanti is affected by vulnerabilities in the following products: Endpoint Manager Mobile Prior to 12.10.0.0 Prior to 12.9.0.2 Prior to 12.8.0.4 Neurons for ITSM (Cloud/SaaS) Prior to mo2026.2 Neurons for ITSM On-Prem Prior to 2025.2 Sept 2026 Security Patch Prior to 2025.3 Sept 2026 Security Patch Prior to 2025.4 Sept 2026 Security Patch Prior to 2026.1 Sept 2026 Security Patch Prior to 2026.2 Sentry Prior to R10.8.2 Prior to R10.7.3 Prior to R10.6.4 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Advisory Ivanti Neurons for ITSM (Multiple CVEs) Security Advisory - Ivanti Endpoint Manager Mobile (CVE-2026-18851) Security Advisory Ivanti Sentry (CVE-2026-83527) September 2026 Security Update Article Link: Ivanti security advisory (AV26-897) - Canadian Centre for Cyber Security
-
update from gbhackers.com
Ivanti Patches 10 EPMM, Neurons for ITSM and Sentry Flaws Enabling RCE and Admin Access
gbhackers.com · 34d ago · September 9th, 2026
The vulnerabilities include several critical remote code execution (RCE) issues in Neurons for ITSM, an authentication bypass in Sentry that could grant administrative access, and a privilege escalation flaw in EPMM. Ivanti Patches 10 EPMM Flaws The […] The post Ivanti Patches 10 EPMM, Neurons for ITSM and Sentry Flaws Enabling RCE and Admin Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from cyberpress.org
Ivanti Patches 10 Flaws Across EPMM, Neurons ITSM and Sentry Including Unauthenticated RCE
cyberpress.org · 34d ago · September 9th, 2026
The disclosures, published September 8, 2026, span mobile device management, IT service management, and gateway infrastructure used in enterprise environments. The EPMM advisory addresses CVE-2026-18851, a high-severity missing authorization vulnerability with a CVSS score of 8.8. Classified as CWE-862, the flaw allows a remote authenticated attacker to elevate privileges to full administrator-level access. Ivanti Patches 10 Flaws Across EPMM, Neurons ITSM and Sentry Affected EPMM releases include versions 12.9.0.1 and earlier, 12.8.0.3 and earlier, and builds prior to 12.10.0.0. Ivanti has issued fixes in versions 12.10.0.0, 12.9.0.2, and 12.8.0.4. The most serious issues affect Ivanti Neurons for ITSM , where eight vulnerabilities can lead to server-side code execution. CVE-2026-12744 and CVE-2026-12745 are critical deserialization-of-untrusted-data flaws, tracked under CWE-502. Each carries a CVSS score of 9.8 and can be exploited remotely without authentication to execute arbitrary code on a vulnerable Neurons for ITSM server. Three further deserialization flaws, CVE-2026-12648, CVE-2026-12650, and CVE-2026-12651, require an authenticated attacker but may also result in RCE. Ivanti additionally identified CVE-2026-12645, CVE-2026-12646,