Ivanti security advisory (AV26-897)
At a glance
- Severity
- Medium
- Used in attacks
- No flaws named
- Vendors and products
- Ivanti
- Industries
- SaaS & technology
- Reported by
- 1 outlet
As of September 8, 2026, Ivanti is affected by vulnerabilities in the following products:
- Endpoint Manager Mobile
- Prior to 12.10.0.0
- Prior to 12.9.0.2
- Prior to 12.8.0.4
- Neurons for ITSM (Cloud/SaaS)
- Prior to mo2026.2
- Neurons for ITSM On-Prem
- Prior to 2025.2 Sept 2026 Security Patch
- Prior to 2025.3 Sept 2026 Security Patch
- Prior to 2025.4 Sept 2026 Security Patch
- Prior to 2026.1 Sept 2026 Security Patch
- Prior to 2026.2
- Sentry
- Prior to R10.8.2
- Prior to R10.7.3
- Prior to R10.6.4
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
Originally published by Canadian Centre for Cyber Security. © Canadian Centre for Cyber Security. Written by Canadian Centre for Cyber Security.
Fastnexa security experts
Dealing with this in your own company?
If this story touches software, suppliers or systems you use, a Fastnexa security expert can tell you what it means for you and what to do first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Coverage
One outlet has carried this so far.
2026-09-08 19:22 UTC
Related stories
- Barracuda Networks security advisory (AV26-1112)
Canadian Centre for Cyber Security · 2026-11-02
- BTCPay Server warns of hot wallet crypto thefts on outdated instances
BleepingComputer · 2026-11-02
- Mutipath TCP: Use and Detection, (Mon, Nov 2nd)
SANS Internet Storm Center · 2026-11-02
- Armadin Tests Find 88% of Severe Flaws Outside Vendor Advisories
Infosecurity Magazine · 2026-11-02
- Apple warns users in 99 countries of mercenary spyware
The Record · 2026-11-02