Ivanti Patches 10 EPMM, Neurons for ITSM and Sentry Flaws Enabling RCE and Admin Access
Ivanti patches 10 flaws in EPMM, Neurons for ITSM, and Sentry, including two 9.8-rated unauthenticated RCEs in ITSM.
60
Product
Ivanti Endpoint Manager Mobile
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenSep 8, 2026
- Last mentionedSep 9, 2026
Timeline
4 articles · newest firstIvanti security advisory (AV26-897)
Canada's Cyber Centre relayed Ivanti's September 2026 security updates for Endpoint Manager Mobile, Neurons for ITSM, and Sentry, urging administrators to patch.
32
Ivanti EPMM, Neurons and Sentry Vulnerabilities Enable Privilege Escalation and RCE Attacks
Ivanti patched ten CVEs across EPMM, Neurons for ITSM and Sentry, including critical unauthenticated deserialization RCE; no active exploitation reported.
68
2026-001: Critical vulnerabilities in Ivanti EPMM
Ivanti EPMM has two critical CVSS 9.8 flaws allowing unauthenticated remote code execution; limited exploitation has already been observed.
72
Related CVEs
by mentions- CVE-2026-188511%8.8Missing Authorization in Ivanti Endpoint Manager Mobile Allows Admin Privilege Escalation
- CVE-2026-835271%8.1Authentication Bypass in Ivanti Sentry Grants Remote Admin Access
- CVE-2026-127452%9.8Unauthenticated RCE via Deserialization in Ivanti Neurons for ITSM
- CVE-2026-127442%9.8Unauthenticated Deserialization RCE in Ivanti Neurons for ITSM
- CVE-2026-126481%8.8Authenticated Deserialization RCE in Ivanti Neurons for ITSM
- CVE-2026-126451%8.8Missing Authorization Flaw Enables Authenticated RCE in Ivanti Neurons for ITSM
- CVE-2026-126511%8.8Authenticated Deserialization RCE in Ivanti Neurons for ITSM
- CVE-2026-126461%8.8Missing Authorization Enables Authenticated RCE in Ivanti Neurons for ITSM
- CVE-2026-126471%8.8Authenticated RCE via Missing Authorization in Ivanti Neurons for ITSM
- CVE-2026-126501%8.8Authenticated Deserialization RCE in Ivanti Neurons for ITSM
Appears with
- Ivantivendor · 4
- Ivanti Neurons for ITSMproduct · 3
- Ivanti Sentryproduct · 3
- Ivantiorganization · 2
- Aquila Sec Laborganization · 1
- Canadian Centre for Cyber Securityvendor · 1
- European Union Agency for Cybersecurityorganization · 1
- CERT-EUorganization · 1
- CERT-EUvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.