Threats Tagged 'cve-2026-12648'

Multiple vulnerabilities have been addressed in Ivanti Neurons for ITSM as reported by the Nationaal Cyber Security Centrum. These include eight distinct CVEs related to issues such as improper authorization and unsafe deserialization. No CVSS scores are provided, and no known exploits in the wild have been reported. The affected versions are not explicitly stated. The vulnerabilities have been fixed according to the advisory.

CVE-2026-12648 is a high-severity vulnerability in Ivanti Neurons for ITSM prior to version 2026.2. It involves deserialization of untrusted data, which allows a remote authenticated attacker to execute arbitrary code on the server. The vulnerability requires low attack complexity and no user interaction, but does require the attacker to have some level of privileges. This flaw impacts confidentiality, integrity, and availability of the affected system.