Aquila Sec Lab

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 8, 2026
Last mentionedSep 8, 2026

Timeline

1 articles · newest first

Ivanti EPMM, Neurons and Sentry Vulnerabilities Enable Privilege Escalation and RCE Attacks

Ivanti patched ten CVEs across EPMM, Neurons for ITSM and Sentry, including critical unauthenticated deserialization RCE; no active exploitation reported.

Cyber Security NewsSep 8, 15:42 UTC · Sep 8, 2026VulnerabilityCVE-2026-18851 CVE-2026-12744 CVE-2026-12745+77 · 1 read

Related CVEs

by mentions

CVE-2026-127452%9.8
Unauthenticated RCE via Deserialization in Ivanti Neurons for ITSM
published Sep 8, 2026Ivanti Neurons for ITSM
CVE-2026-127442%9.8
Unauthenticated Deserialization RCE in Ivanti Neurons for ITSM
published Sep 8, 2026Ivanti Neurons for ITSM
CVE-2026-126471%8.8
Authenticated RCE via Missing Authorization in Ivanti Neurons for ITSM
published Sep 8, 2026Ivanti Neurons for ITSM
CVE-2026-126501%8.8
Authenticated Deserialization RCE in Ivanti Neurons for ITSM
published Sep 8, 2026Ivanti Neurons for ITSM
CVE-2026-126461%8.8
Missing Authorization Enables Authenticated RCE in Ivanti Neurons for ITSM
published Sep 8, 2026Ivanti Neurons for ITSM
CVE-2026-188511%8.8
Missing Authorization in Ivanti Endpoint Manager Mobile Allows Admin Privilege Escalation
published Sep 8, 2026Ivanti Endpoint Manager Mobile (EPMM)
CVE-2026-126511%8.8
Authenticated Deserialization RCE in Ivanti Neurons for ITSM
published Sep 8, 2026Ivanti Neurons for ITSM
CVE-2026-126481%8.8
Authenticated Deserialization RCE in Ivanti Neurons for ITSM
published Sep 8, 2026Ivanti Neurons for ITSM
CVE-2026-126451%8.8
Missing Authorization Flaw Enables Authenticated RCE in Ivanti Neurons for ITSM
published Sep 8, 2026Ivanti Neurons for ITSM
CVE-2026-835271%8.1
Authentication Bypass in Ivanti Sentry Grants Remote Admin Access
published Sep 8, 2026Ivanti Sentry

Appears with

Ivanti Neurons for ITSMproduct · 1
Ivanti Sentryproduct · 1
Ivantivendor · 1
Ivanti Endpoint Manager Mobileproduct · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned Sep 8, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.