{"vulnerability": "CVE-2026-12647", "sightings": [{"uuid": "45d96a7a-6981-4d1c-b527-321516de5c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzfs7prbt2t", "content": "\ud83d\udea8 CVE-2026-12647 \u2014 CVSS 9.9 CRITICAL\n\nA Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticate...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T16:08:01.931317Z"}, {"uuid": "e3c1b00f-1914-4d11-bea6-9a33dd17d60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzr3km5hp2f", "content": "CVE-2026-12647 - ivanti neurons for itsm\nVersions of Ivanti Neurons for ITSM released before the 2026.2 update allow someone who has a valid login to make the server execute any program they choose. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ivanti #CVE #infosec", "creation_timestamp": "2026-09-08T19:30:06.453188Z"}, {"uuid": "20e9dffb-9634-4302-b52f-8e8c75f53f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-09T20:00:05.696768Z"}, {"uuid": "63377ce3-a4f2-41bb-914b-58ded1cc1e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-10T00:00:12.736504Z"}]}