Deserialization Vulnerability in Ivanti Neurons for ITSM Software

CVE-2026-12651

What is CVE-2026-12651?

A vulnerability in Ivanti Neurons for ITSM allows a remote authenticated attacker to exploit deserialization of untrusted data, leading to arbitrary code execution on the server. This flaw poses significant security risks, as it could enable malicious actors to manipulate the application and gain unauthorized access to sensitive data or control of the system. Users of affected versions are strongly advised to update to version 2026.2 or later to mitigate potential threats.

References