CVE-2026-12745 Ivanti CVE debrief

Who should care

Ivanti Neurons for ITSM administrators and users, as well as security teams responsible for monitoring and protecting these systems, should assess their exposure and take remediation steps.

Why it matters

CVE-2026-12745 is a critical vulnerability in Ivanti Neurons for ITSM that allows remote unauthenticated attackers to execute arbitrary code on the server. Ivanti Neurons for ITSM administrators and users, as well as security teams, should assess their exposure and take remediation steps. The vulnerability has a CVSS score of 9.8 and is classified as CRITICAL. Remediation efforts should focus on upgrading to version 2026.2 or later and restricting access to trusted networks only.

• Remote code execution can lead to unauthorized access and control of the server
• Exploitation can result in data breaches, system compromise, and lateral movement
• Successful exploitation requires no authentication, making it a high-risk vulnerability
• Verification of affected versions and remediation efforts is crucial to prevent exploitation

Technical summary

The vulnerability exists in Ivanti Neurons for ITSM versions before 2026.2. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted request to the server, which can lead to arbitrary code execution. The vulnerability has a CVSS score of 9.8 and is classified as CRITICAL. To mitigate this vulnerability, it is recommended to upgrade to version 2026.2 or later and restrict access to Ivanti Neurons for ITSM instances to trusted networks only. Additionally, monitoring Ivanti Neurons for ITSM instances for suspicious activity can help

Defensive priority

High priority remediation is recommended for Ivanti Neurons for ITSM instances, especially those exposed to the internet or untrusted networks.

Recommended defensive actions

• Immediately upgrade Ivanti Neurons for ITSM to version 2026.2 or later
• Restrict access to Ivanti Neurons for ITSM instances to trusted networks only
• Monitor Ivanti Neurons for ITSM instances for suspicious activity

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, including its description, CVSS score, and affected versions.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.