CVE-2026-12647

CRITICALCVSS 9.92% EPSS

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

Published 2026-09-08 · last modified 2026-09-18

Affected products

VendorProduct
ivantineurons_for_itsm

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.