CVE-2026-12648: High severity Ivanti Neurons for ITSM vulnerability
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker who is authenticated to Ivanti Neurons for ITSM can exploit it. The available information does not identify any required role or privilege level beyond authentication.
What is the potential impact of successful exploitation?
Successful exploitation allows arbitrary code execution on the affected server. The vulnerability is rated high with impacts to confidentiality, integrity, and availability.
Which deployments are affected?
Ivanti Neurons for ITSM versions before 2026.2 are affected. The provided information does not state whether any particular default configuration or deployment option is required.
What should teams do to remediate it?
Update Ivanti Neurons for ITSM to version 2026.2 or later. No compensating controls or workaround are provided in the available information.