Ivanti EPMM, Neurons and Sentry Vulnerabilities Enable Privilege Escalation and RCE Attacks

Cybersecuritynews •Guru Baran • September 8, 2026

Ivanti has disclosed a wave of security advisories affecting three flagship enterprise products, Endpoint Manager Mobile, Neurons for ITSM, and Sentry, exposing organizations to risks ranging from privilege escalation to full remote code execution. The disclosures, published on September 8, 2026, cover ten distinct CVEs, several rated critical, underscoring the breadth of exposure across Ivanti’s […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ivanti Discloses Critical Authentication Bypass Vulnerabilities On September 8, 2026, Ivanti disclosed multiple vulnerabilities affecting its Endpoint Manager Mobile (EPMM), Neurons for ITSM, and Sentry products. Two critical CVEs, CVE-2026-83527 and CVE-2026-18851, allow for authentication bypass and privilege escalation, respectively. CVE-2026-83527 has a CVSS score of 8.1, enabling remote attackers to gain administrative access without credentials. CVE-2026-18851, with a CVSS of 8.8, requires initial authentication but allows escalation to full admin privileges. The broader disclosure includes ten CVEs, with several rated critical, indicating a significant security gap across Ivanti's management stack. None of the vulnerabilities were reported to be exploited in the wild prior to disclosure, but the history of similar vulnerabilities raises concerns. Organizations using affected versions are urged to apply patches immediately to mitigate risks. 4 sources 61

Extracted Entities

Ivanti EPMM, Neurons and Sentry Vulnerabilities Enable Privilege Escalation and RCE Attacks

The full story

Extracted Entities

Attack Types (2)

MITRE ATT&CK (2)

Platforms (2)

Tools (1)