<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 11 Sep 2026 13:43:35 +0000</lastBuildDate>
    <item>
      <title>63377ce3-a4f2-41bb-914b-58ded1cc1e56</title>
      <link>https://vulnerability.circl.lu/sighting/63377ce3-a4f2-41bb-914b-58ded1cc1e56/export</link>
      <description>{"uuid": "63377ce3-a4f2-41bb-914b-58ded1cc1e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-10T00:00:12.736504Z"}</description>
      <content:encoded>{"uuid": "63377ce3-a4f2-41bb-914b-58ded1cc1e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-10T00:00:12.736504Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/63377ce3-a4f2-41bb-914b-58ded1cc1e56/export</guid>
      <pubDate>Thu, 10 Sep 2026 00:00:12 +0000</pubDate>
    </item>
    <item>
      <title>20e9dffb-9634-4302-b52f-8e8c75f53f8c</title>
      <link>https://vulnerability.circl.lu/sighting/20e9dffb-9634-4302-b52f-8e8c75f53f8c/export</link>
      <description>{"uuid": "20e9dffb-9634-4302-b52f-8e8c75f53f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-09T20:00:05.696768Z"}</description>
      <content:encoded>{"uuid": "20e9dffb-9634-4302-b52f-8e8c75f53f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://t.me/pphm_HackerNews/3073", "content": "\ud83d\udd34 Ivanti Patches Critical Flaws Across Enterprise Security Products\n\nIvanti announced security updates that address vulnerabilities rated critical and high severity in its Neurons for ITSM, Sentry, and Endpoint Manager Mobile (EPMM) products.\n\nNeurons for ITSM received fixes for the largest number of security defects. Of the eight bugs, six are critical-severity issues that could lead to remote code execution, Ivanti warns.\n\nThese include CVE-2026-12647, CVE-2026-12645, and CVE-2026-12646 (CVSS score of 9.9/10), described as missing authorization issues; and CVE-2026-12650 (CVSS score of 9.9/10), CVE-2026-12744, and CVE-2026-12745 (CVSS score of 9.8/10), described as deserialization of untrusted data weaknesses.", "creation_timestamp": "2026-09-09T20:00:05.696768Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/20e9dffb-9634-4302-b52f-8e8c75f53f8c/export</guid>
      <pubDate>Wed, 09 Sep 2026 20:00:05 +0000</pubDate>
    </item>
    <item>
      <title>e3c1b00f-1914-4d11-bea6-9a33dd17d60a</title>
      <link>https://vulnerability.circl.lu/sighting/e3c1b00f-1914-4d11-bea6-9a33dd17d60a/export</link>
      <description>{"uuid": "e3c1b00f-1914-4d11-bea6-9a33dd17d60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzr3km5hp2f", "content": "CVE-2026-12647 - ivanti neurons for itsm\nVersions of Ivanti Neurons for ITSM released before the 2026.2 update allow someone who has a valid login to make the server execute any program they choose. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ivanti #CVE #infosec", "creation_timestamp": "2026-09-08T19:30:06.453188Z"}</description>
      <content:encoded>{"uuid": "e3c1b00f-1914-4d11-bea6-9a33dd17d60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzr3km5hp2f", "content": "CVE-2026-12647 - ivanti neurons for itsm\nVersions of Ivanti Neurons for ITSM released before the 2026.2 update allow someone who has a valid login to make the server execute any program they choose. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ivanti #CVE #infosec", "creation_timestamp": "2026-09-08T19:30:06.453188Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e3c1b00f-1914-4d11-bea6-9a33dd17d60a/export</guid>
      <pubDate>Tue, 08 Sep 2026 19:30:06 +0000</pubDate>
    </item>
    <item>
      <title>45d96a7a-6981-4d1c-b527-321516de5c21</title>
      <link>https://vulnerability.circl.lu/sighting/45d96a7a-6981-4d1c-b527-321516de5c21/export</link>
      <description>{"uuid": "45d96a7a-6981-4d1c-b527-321516de5c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzfs7prbt2t", "content": "\ud83d\udea8 CVE-2026-12647 \u2014 CVSS 9.9 CRITICAL\n\nA Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticate...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T16:08:01.931317Z"}</description>
      <content:encoded>{"uuid": "45d96a7a-6981-4d1c-b527-321516de5c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muzfs7prbt2t", "content": "\ud83d\udea8 CVE-2026-12647 \u2014 CVSS 9.9 CRITICAL\n\nA Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticate...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-12647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T16:08:01.931317Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/45d96a7a-6981-4d1c-b527-321516de5c21/export</guid>
      <pubDate>Tue, 08 Sep 2026 16:08:01 +0000</pubDate>
    </item>
  </channel>
</rss>
