CVE-2026-12744

Published: Sep 8, 2026Modified: Sep 18, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 (Secondary)

Description

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.

Affected (5)

Products: Ivanti: Neurons For Itsm

Ivanti

1 product

Neurons For Itsm

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ivanti Neurons For Itsm	Version 2025.2
Ivanti Neurons For Itsm	Version 2025.3
Ivanti Neurons For Itsm	Version 2025.4
Ivanti Neurons For Itsm	Version 2026.1
Ivanti Neurons For Itsm	Version 2026.2

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (1)

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US

Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Vendor Advisory

Timeline

No history available yet.