CVE-2026-12647

Ivanti Neurons for ITSM versions prior to 2026.2 are vulnerable due to a Missing Authorization flaw that enables remote authenticated attackers to execute arbitrary code on the server. This critical vulnerability poses a significant risk to the integrity and confidentiality of affected systems. Organizations utilizing this software should prioritize immediate patching to mitigate potential exploitation.