CVE-2026-12744: Critical severity Ivanti Neurons for ITSM vulnerability
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker does not need to authenticate and does not require user interaction. The attack complexity is rated low, indicating exploitation does not depend on special conditions described in the available data.
Which deployments are affected?
Ivanti Neurons for ITSM versions before 2026.2 are affected. The available data does not identify any configuration prerequisite or mitigation for systems that cannot be upgraded immediately.
What is the potential impact of successful exploitation?
Successful exploitation allows arbitrary code execution on the server. The supplied severity metrics indicate high impact to confidentiality, integrity, and availability.