https://vulnerability.circl.lu/sightings/feed 2026-09-11T13:43:26.659447+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e9f72a39-3d2a-4f18-b2c8-fc18670e64c2/export 2026-09-11T13:43:26.675388+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e9f72a39-3d2a-4f18-b2c8-fc18670e64c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-10T00:00:21.404529Z"} 2026-09-10T00:00:21.404529+00:00 https://vulnerability.circl.lu/sighting/d68cb089-69df-48c9-a69f-8b02917cabf6/export 2026-09-11T13:43:26.677021+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d68cb089-69df-48c9-a69f-8b02917cabf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-09T20:00:05.561864Z"} 2026-09-09T20:00:05.561864+00:00 https://vulnerability.circl.lu/sighting/6d5f9222-5645-4db4-bc07-dac7501bff0c/export 2026-09-11T13:43:26.677159+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6d5f9222-5645-4db4-bc07-dac7501bff0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzpxrnv3j25", "content": "CVE-2026-12646 - ivanti neurons for itsm\nIf you use Ivanti Neurons for ITSM version earlier than 2026.2, a user who has signed in can make the server run any program they choose. This could let an attacker take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ivanti #CVE #infosec", "creation_timestamp": "2026-09-08T19:10:06.920846Z"} 2026-09-08T19:10:06.920846+00:00 https://vulnerability.circl.lu/sighting/097005f4-8284-4122-92db-43ac1462a2e2/export 2026-09-11T13:43:26.677279+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "097005f4-8284-4122-92db-43ac1462a2e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12646", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzfrx2la32b", "content": "\ud83d\udea8 CVE-2026-12646 \u2014 CVSS 9.9 CRITICAL\n\nA Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticate...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12646\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T16:07:52.654584Z"} 2026-09-08T16:07:52.654584+00:00