VDB
CVE-2026-18851
CVE-2026-18851
PUBLISHED
As of September 8, 2026, Ivanti is affected by vulnerabilities in the following products: Endpoint Manager Mobile Prior to 12.10.0.0 Prior to 12.9.0.2 Prior to 12.8.0.4 Neurons for ITSM (Cloud/SaaS) Prior to mo2026.2 Neurons for ITSM On-Prem Prior to 2025.2 Sept 2026 Security Patch Prior to 2025.3 Sept 2026 Security Patch Prior to 2025.4 Sept 2026 Security Patch Prior to 2026.1 Sept 2026 Security Patch Prior to 2026.2 Sentry Prior to R10.8.2 Prior to R10.7.3 Prior to R10.6.4 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
EPSS 1.02% · 61.5th percentile
Risk Scores
EPSS Score
1.02%
61.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Prior | Prior to 2026.1 Sept 2026 Security Patch | |
| Prior | Prior to 2026.2 | |
| Prior | Prior to 2025.3 Sept 2026 Security Patch | |
| Prior | Prior to 2025.2 Sept 2026 Security Patch | |
| Prior | Prior to mo2026.2 | |
| Prior | Prior to R10.8.2 | |
| Prior | Prior to R10.6.4 | |
| Prior | Prior to 12.8.0.4 | |
| Prior | Prior to 12.9.0.2 | |
| Prior | Prior to R10.7.3 | |
| Prior | Prior to 12.10.0.0 | |
| Prior | Prior to 2025.4 Sept 2026 Security Patch |
Timeline
- Sep 8, 2026 Coalition ESS Score
- Sep 8, 2026 CVE Published
- Sep 9, 2026 EPSS Score
References
- https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-897 advisory
- https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US vendor
- https://hub.ivanti.com/s/article/Security-Advisory---Ivanti-Endpoint-Manager-Mobile-CVE-2026-18851?language=en_US vendor
- https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-83527?language=en_US vendor
- https://www.ivanti.com/blog/september-2026-security-update vendor