Ivanti Issues Emergency Patches for Ten Critical Flaws Across Mobile Management, ITSM, and Sentry Products

Ivanti announced a series of emergency security updates today that close ten newly disclosed vulnerabilities affecting its Endpoint Manager Mobile (EPMM) platform, the Neurons for IT Service Management (ITSM) suite, and the Sentry monitoring tool. The patches address a range of issues, including multiple high‑severity remote code execution (RCE) bugs in Neurons for ITSM and an authentication bypass flaw in Sentry that could allow attackers to gain administrative privileges.

The vulnerabilities were initially brought to public attention by the security research collective GBHackers, who warned that the flaws could be exploited without requiring user interaction. In Neurons for ITSM, the RCE weaknesses stem from insufficient validation of input data processed by the service’s API endpoints, potentially enabling a malicious actor to execute arbitrary code on affected servers. The Sentry flaw, by contrast, bypasses the product’s login checks, granting unauthorized users access to the console and the ability to modify configuration settings.

Ivanti’s response includes updated binaries for each affected component, along with detailed guidance for administrators on how to apply the fixes. The company recommends that organizations using EPMM, Neurons for ITSM, or Sentry prioritize the patches, especially those with a critical severity rating, to mitigate the risk of compromise. Ivanti also advises customers to review their network segmentation and monitoring practices to detect any attempted exploitation of the disclosed weaknesses.

Security analysts note that the discovery of multiple critical bugs across Ivanti’s product line underscores the growing attack surface of enterprise management tools. These solutions often have deep integration with corporate networks, granting them privileged access to devices, data, and operational workflows. When such tools are compromised, attackers can move laterally, exfiltrate sensitive information, or disrupt business processes.

While Ivanti has not disclosed the exact number of customers potentially affected, the firm’s user base spans thousands of enterprises worldwide, ranging from small businesses to large multinational corporations. The company’s rapid issuance of patches aligns with industry best practices for responsible vulnerability disclosure, aiming to give organizations sufficient time to remediate before attackers can develop reliable exploits.

Experts recommend that organizations not only apply the patches but also conduct a post‑patch validation to confirm that the fixes are effective. This may involve scanning for indicators of compromise, reviewing logs for anomalous activity, and verifying that the updated components are functioning as intended. In addition, keeping software inventories up to date and maintaining a regular patching cadence can reduce exposure to similar threats in the future.

Looking ahead, Ivanti has pledged to continue its investment in security research and to enhance its vulnerability management processes. The company’s leadership emphasized that the recent incidents reinforce the need for ongoing collaboration with the security community, including independent researchers like GBHackers, to identify and remediate weaknesses before they can be weaponized.