Vulnerability Details CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.019
EPSS Ranking 80.1%
CVSS Severity
CVSS v3 Score 9.9
Products affected by CVE-2026-12650
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.2
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.3
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.4
-
cpe:2.3:a:ivanti:neurons_for_itsm:2026.1
-
cpe:2.3:a:ivanti:neurons_for_itsm:2026.2