
Ivanti patches unauthenticated SQL injection RCE in Endpoint Manager
CVE-2026-121653 scores 9.8 in EPM before 2024 SU8; Ivanti says no known customer exploitation.
16 stories, newest first · one card per story

CVE-2026-121653 scores 9.8 in EPM before 2024 SU8; Ivanti says no known customer exploitation.

CVE-2026-121653 scores 9.8 and allows unauthenticated SQL injection code execution on Endpoint Manager Core before 2024 SU8.

NVIDIA launched Open Agent Safety Platform, pairing OpenShell sandboxes with a BlueField-4 watchdog.

Nvidia launched the Open Agent Safety Platform combining OpenShell sandboxing with BlueField-4 DPU-based Sentry monitoring to contain rogue AI agents.

Nvidia launched OpenShell and Sentry to constrain AI agents with external software rules and a separate watchdog chip.

Nvidia announced Sentry, a hardware watchdog on BlueField-4 DPUs that isolates escaping AI agents within milliseconds, bundled with its OpenShell agent sandbox.

NVIDIA launched its Open Agent Safety Platform combining the open-source OpenShell runtime with Sentry hardware watchdog to quarantine out-of-bounds AI agents in milliseconds.

NVIDIA launched the Open Agent Safety Platform, an open framework with OpenShell runtime and BlueField-based Sentry to enforce policies on autonomous AI agents.

NVIDIA released an open platform that confines AI agents with runtime policies and separate-hardware monitoring.

Nvidia launched an agent safety platform pairing OpenShell sandboxing with a BlueField-4 hardware watchdog.
CERT/CC details CVE-2026-90999: attacker-controlled Sentry telemetry can steer the Seer coding agent into executing attacker code with repository access.

Ivanti released September updates fixing six critical RCE flaws in Neurons for ITSM plus authentication bypasses in Sentry and EPMM; no exploitation seen.

Ivanti patches 10 flaws in EPMM, Neurons for ITSM, and Sentry, including two 9.8-rated unauthenticated RCEs in ITSM.

Canada's Cyber Centre relayed Ivanti's September 2026 security updates for Endpoint Manager Mobile, Neurons for ITSM, and Sentry, urging administrators to patch.

Ivanti patched ten CVEs across EPMM, Neurons for ITSM and Sentry, including critical unauthenticated deserialization RCE; no active exploitation reported.

Ivanti patched Sentry: pre-auth OS command injection CVE-2026-10520 (CVSS 10) enables unauthenticated root RCE, and auth bypass CVE-2026-10523 (CVSS 9.9).
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views