Vulnerability Details CVE-2026-12745
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 80.8%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-12745
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.2
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.3
-
cpe:2.3:a:ivanti:neurons_for_itsm:2025.4
-
cpe:2.3:a:ivanti:neurons_for_itsm:2026.2