https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 11 Sep 2026 18:21:06 +0000 https://vulnerability.circl.lu/sighting/e9f72a39-3d2a-4f18-b2c8-fc18670e64c2/export {"uuid": "e9f72a39-3d2a-4f18-b2c8-fc18670e64c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-10T00:00:21.404529Z"} {"uuid": "e9f72a39-3d2a-4f18-b2c8-fc18670e64c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-10T00:00:21.404529Z"} https://vulnerability.circl.lu/sighting/e9f72a39-3d2a-4f18-b2c8-fc18670e64c2/export Thu, 10 Sep 2026 00:00:21 +0000 https://vulnerability.circl.lu/sighting/d68cb089-69df-48c9-a69f-8b02917cabf6/export {"uuid": "d68cb089-69df-48c9-a69f-8b02917cabf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-09T20:00:05.561864Z"} {"uuid": "d68cb089-69df-48c9-a69f-8b02917cabf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-09T20:00:05.561864Z"} https://vulnerability.circl.lu/sighting/d68cb089-69df-48c9-a69f-8b02917cabf6/export Wed, 09 Sep 2026 20:00:05 +0000 https://vulnerability.circl.lu/sighting/6d5f9222-5645-4db4-bc07-dac7501bff0c/export {"uuid": "6d5f9222-5645-4db4-bc07-dac7501bff0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzpxrnv3j25", "content": "CVE-2026-12646 - ivanti neurons for itsm\nIf you use Ivanti Neurons for ITSM version earlier than 2026.2, a user who has signed in can make the server run any program they choose. This could let an attacker take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ivanti #CVE #infosec", "creation_timestamp": "2026-09-08T19:10:06.920846Z"} {"uuid": "6d5f9222-5645-4db4-bc07-dac7501bff0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzpxrnv3j25", "content": "CVE-2026-12646 - ivanti neurons for itsm\nIf you use Ivanti Neurons for ITSM version earlier than 2026.2, a user who has signed in can make the server run any program they choose. This could let an attacker take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ivanti #CVE #infosec", "creation_timestamp": "2026-09-08T19:10:06.920846Z"} https://vulnerability.circl.lu/sighting/6d5f9222-5645-4db4-bc07-dac7501bff0c/export Tue, 08 Sep 2026 19:10:06 +0000 https://vulnerability.circl.lu/sighting/097005f4-8284-4122-92db-43ac1462a2e2/export {"uuid": "097005f4-8284-4122-92db-43ac1462a2e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzfrx2la32b", "content": "\ud83d\udea8 CVE-2026-12646 \u2014 CVSS 9.9 CRITICAL\n\nA Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticate...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12646\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T16:07:52.654584Z"} {"uuid": "097005f4-8284-4122-92db-43ac1462a2e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzfrx2la32b", "content": "\ud83d\udea8 CVE-2026-12646 \u2014 CVSS 9.9 CRITICAL\n\nA Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticate...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12646\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T16:07:52.654584Z"} https://vulnerability.circl.lu/sighting/097005f4-8284-4122-92db-43ac1462a2e2/export Tue, 08 Sep 2026 16:07:52 +0000