<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 11 Sep 2026 17:44:43 +0000</lastBuildDate>
    <item>
      <title>ae9e6f2b-cf91-48dd-a66d-05c779114273</title>
      <link>https://vulnerability.circl.lu/sighting/ae9e6f2b-cf91-48dd-a66d-05c779114273/export</link>
      <description>{"uuid": "ae9e6f2b-cf91-48dd-a66d-05c779114273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12650", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-10T00:00:12.785678Z"}</description>
      <content:encoded>{"uuid": "ae9e6f2b-cf91-48dd-a66d-05c779114273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12650", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-10T00:00:12.785678Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ae9e6f2b-cf91-48dd-a66d-05c779114273/export</guid>
      <pubDate>Thu, 10 Sep 2026 00:00:12 +0000</pubDate>
    </item>
    <item>
      <title>bd14cffa-8f82-4ece-a57c-e1fa75348654</title>
      <link>https://vulnerability.circl.lu/sighting/bd14cffa-8f82-4ece-a57c-e1fa75348654/export</link>
      <description>{"uuid": "bd14cffa-8f82-4ece-a57c-e1fa75348654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12650", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-09T20:00:05.727451Z"}</description>
      <content:encoded>{"uuid": "bd14cffa-8f82-4ece-a57c-e1fa75348654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12650", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-09T20:00:05.727451Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bd14cffa-8f82-4ece-a57c-e1fa75348654/export</guid>
      <pubDate>Wed, 09 Sep 2026 20:00:05 +0000</pubDate>
    </item>
    <item>
      <title>0f8400f6-f15f-4407-8fd8-aacc3860bf47</title>
      <link>https://vulnerability.circl.lu/sighting/0f8400f6-f15f-4407-8fd8-aacc3860bf47/export</link>
      <description>{"uuid": "0f8400f6-f15f-4407-8fd8-aacc3860bf47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12650", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzrnexv4z2f", "content": "CVE-2026-12650 - neurons for itsm\nIf you are using Ivanti Neurons for ITSM version earlier than 2026.2, a signed\u2011in attacker could send crafted data that makes the server execute any program they choose. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ivanti #CVE #infosec", "creation_timestamp": "2026-09-08T19:40:04.682084Z"}</description>
      <content:encoded>{"uuid": "0f8400f6-f15f-4407-8fd8-aacc3860bf47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12650", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzrnexv4z2f", "content": "CVE-2026-12650 - neurons for itsm\nIf you are using Ivanti Neurons for ITSM version earlier than 2026.2, a signed\u2011in attacker could send crafted data that makes the server execute any program they choose. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ivanti #CVE #infosec", "creation_timestamp": "2026-09-08T19:40:04.682084Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0f8400f6-f15f-4407-8fd8-aacc3860bf47/export</guid>
      <pubDate>Tue, 08 Sep 2026 19:40:04 +0000</pubDate>
    </item>
    <item>
      <title>decce346-80ce-4c72-bebc-fbea45e20c1e</title>
      <link>https://vulnerability.circl.lu/sighting/decce346-80ce-4c72-bebc-fbea45e20c1e/export</link>
      <description>{"uuid": "decce346-80ce-4c72-bebc-fbea45e20c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12650", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzfsirsjt2t", "content": "\ud83d\udea8 CVE-2026-12650 \u2014 CVSS 9.9 CRITICAL\n\nA Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12650\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T16:08:11.320232Z"}</description>
      <content:encoded>{"uuid": "decce346-80ce-4c72-bebc-fbea45e20c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12650", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzfsirsjt2t", "content": "\ud83d\udea8 CVE-2026-12650 \u2014 CVSS 9.9 CRITICAL\n\nA Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12650\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T16:08:11.320232Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/decce346-80ce-4c72-bebc-fbea45e20c1e/export</guid>
      <pubDate>Tue, 08 Sep 2026 16:08:11 +0000</pubDate>
    </item>
  </channel>
</rss>
