SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-12650

CRITICAL · CVSS 9.9 EPSS 1.46%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

Ivanti Neurons for ITSM versions prior to 2026.2 are vulnerable to a critical deserialization of untrusted data flaw, enabling remote authenticated attackers to execute arbitrary code on the server. This vulnerability poses a significant risk to the integrity and confidentiality of affected systems. Organizations using this software should prioritize immediate patching to mitigate potential exploitation.

CVE
CVE-2026-12650
Severity
CRITICAL
CVSS
9.9
EPSS
1.46%
Ivanti

Original NVD Description

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.