CVE-2026-12645

Ivanti / Ivanti Neurons for ITSM PUBLISHED

Description (CNA)

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

Affected (CNA)

Vendor / product	Versions
Ivanti / Ivanti Neurons for ITSM	unaffected 2026.2

CWE

CWE-862

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.