CVE-2026-12646

Ivanti Neurons for ITSM versions prior to 2026.2 are vulnerable to a Missing Authorization flaw that enables remote authenticated attackers to execute arbitrary code on the server. This critical vulnerability poses a significant risk to organizations using the affected software, as it can lead to unauthorized access and control over sensitive systems. Organizations utilizing Ivanti Neurons for ITSM should prioritize immediate patching to mitigate potential exploitation.