CVE-2026-12645

Ivanti Neurons for ITSM versions prior to 2026.2 are vulnerable to a Missing Authorization flaw that enables remote authenticated attackers to execute arbitrary code on the server. This critical vulnerability poses significant risks, including potential data breaches and system compromise. Organizations using affected versions should prioritize immediate patching to mitigate the threat.