Vulnerability Details CVE-2026-12647
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 66.5%
CVSS Severity
CVSS v3 Score 9.9
Products affected by CVE-2026-12647
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.2
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.3
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.4
-
cpe:2.3:a:ivanti:neurons_for_itsm:2026.1
-
cpe:2.3:a:ivanti:neurons_for_itsm:2026.2