Vulnerability Details CVE-2026-12651
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 73.0%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-12651
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.2
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.3
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.4
-
cpe:2.3:a:ivanti:neurons_for_itsm:2026.1
-
cpe:2.3:a:ivanti:neurons_for_itsm:2026.2