Search: CVE-2026-12648

CVE-2026-12648 is a high-severity vulnerability in Ivanti Neurons for ITSM prior to version 2026.2. It involves deserialization of untrusted data, which allows a remote authenticated attacker to execute arbitrary code on the server. The vulnerability requires low attack complexity and no user interaction, but does require the attacker to have some level of privileges. This flaw impacts confidentiality, integrity, and availability of the affected system.