9.9
Critical
CVE-2026-12647 A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to…
Description
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ivanti Neurons for ITSM 2026.2 | earliest → < 2026.2 | 2026.2 |
References
- hub.ivanti.com hub.ivanti.com
Timeline
- Published
- Last modified