Skip to content
9.9 Critical

CVE-2026-12645 A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to…

Description

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

Affected products and versions

Product Affected versions Fixed in
Ivanti Neurons for ITSM 2026.2 earliest → < 2026.2 2026.2

References

Timeline

  1. Published
  2. Last modified
The 3 CVEs of Ivanti Neurons for ITSM →
Track this CVE