CVE-2026-12648

Ivanti Neurons for ITSM versions prior to 2026.2 are vulnerable to a deserialization of untrusted data flaw, enabling remote authenticated attackers to execute arbitrary code on the server. This high-severity vulnerability poses significant risks to the integrity and confidentiality of affected systems. Organizations using this software should prioritize patching to mitigate potential exploitation.