CVE-2026-12744
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 2.17%
- 81th pct
- KEV
- No
- Class
- other
- CWE-502
Description
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
References
Status: profiled · ingested 2026-09-18T18:00:27.000Z