Vulnerability Details CVE-2026-12744
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.022
EPSS Ranking 81.4%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-12744
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.2
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.3
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.4
-
cpe:2.3:a:ivanti:neurons_for_itsm:2026.1
-
cpe:2.3:a:ivanti:neurons_for_itsm:2026.2