critical9.9
CVE-2026-12646
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
Impact
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Neurons For Itsm | Versions 2025.2, 2025.3, 2025.4, 2026.1, 2026.2 |