47
30
Ivanti Patches Critical Flaws Across Enterprise Security Products
Ivanti released September updates fixing six critical RCE flaws in Neurons for ITSM plus authentication bypasses in Sentry and EPMM; no exploitation seen.
Ivanti's September 2026 updates fix eight flaws in Neurons for ITSM, six of them critical remote code execution bugs with CVSS scores up to 9.9, including missing authorization issues (CVE-2026-12647, CVE-2026-12645, CVE-2026-12646) and deserialization flaws (CVE-2026-12650, CVE-2026-12744, CVE-2026-12745). Sentry releases R10.8.2, R10.7.3, and R10.6.4 patch CVE-2026-83527, an unauthenticated high-severity authentication bypass, while EPMM versions 12.10.0.0, 12.9.0.2, and 12.8.0.4 fix the authenticated bypass CVE-2026-18851. Ivanti says it is not aware of any exploitation in the wild. Citrix separately patched two medium-severity flaws in Workspace app for Windows.
62
30
60