Ivanti security advisory (AV26-897)
MediumCanadian Centre for Cyber Security · Canadian Centre for Cyber Security·
At a glance
- Severity
- Medium
- Used in attacks
- No flaws named
- Vendors and products
- Ivanti
- Industries
- SaaS & technology
- Reported by
- 1 outlet
As of September 8, 2026, Ivanti is affected by vulnerabilities in the following products:
- Endpoint Manager Mobile
- Prior to 12.10.0.0
- Prior to 12.9.0.2
- Prior to 12.8.0.4
- Neurons for ITSM (Cloud/SaaS)
- Prior to mo2026.2
- Neurons for ITSM On-Prem
- Prior to 2025.2 Sept 2026 Security Patch
- Prior to 2025.3 Sept 2026 Security Patch
- Prior to 2025.4 Sept 2026 Security Patch
- Prior to 2026.1 Sept 2026 Security Patch
- Prior to 2026.2
- Sentry
- Prior to R10.8.2
- Prior to R10.7.3
- Prior to R10.6.4
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
Reproduced in full under licence from Canadian Centre for Cyber Security. © Canadian Centre for Cyber Security. Written by Canadian Centre for Cyber Security.
Read at cyber.gc.ca ↗Official Source
Coverage
One outlet has carried this so far.
2026-09-08 19:22 UTC
Related stories
- Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
The Hacker News · 2026-09-16
- PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug
Infosecurity Magazine · 2026-09-16
- Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
The Hacker News · 2026-09-16
- Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix
The Hacker News · 2026-09-16
- Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation
The Hacker News · 2026-09-16 · exploited