critical9.8
CVE-2026-12745
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code o…
Impact
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Neurons For Itsm | Versions 2025.2, 2025.3, 2025.4, 2026.2 |