CVE-2026-12645Patch(ivanti / neurons_for_itsm)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch ivanti neurons_for_itsm systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

ivanti CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

neurons_for_itsm

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 2 signals
General: 2 classified signals
Peaked at 2 mentions on most recent observed day (2026-09-10)
4 total mentions across 3 days

Affected systems

Vendors

ivanti

Products

neurons_for_itsm

5 versions affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Patch

250.0%

General

250.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-08	1	Patch1
2026-09-09	1	General1
2026-09-10	2	General1Patch1

Full discourse4 posts

YogSotho@YogSoth044d
General
☢️☢️ Ivanti Multi Exploits Framework - for the September 2026 Ivanti Neurons for ITSM CVE cluster ☢️☢️ | CVE-2026-12744 | | CVE-2026-12745 | | CVE-2026-12648 | | CVE-2026-12650 | | CVE-2026-12651 | | CVE-2026-12645 | | CVE-2026-12646 | | CVE-2026-12647 | #ivanti #0days #exploit #security #cybersecurity #cve #rce #antisec #brokensec
Post summary
The post enumerates a list of CVEs for Ivanti Neurons for ITSM without providing any technical, exploit, or mitigation details.
030168795
2.0K followersView on X
GovCERT.CZ@GOVCERT_CZ44d
Patch
🚨 Upozorňujeme na sérii kritických zranitelností v Ivanti Neurons for ITSM. Společnost Ivanti zveřejnila celkem sedm zranitelností (CVE-2026-12744, CVE-2026-12745, CVE-2026-12651, CVE-2026-12650, CVE-2026-12648, CVE-2026-12645, CVE-2026-12646 a CVE-2026-12647) s CVSS skóre až 9.9. Zranitelnosti mohou vzdálenému útočníkovi umožnit spuštění libovolného kódu na serveru. V případě CVE-2026-12744 a CVE-2026-12745 je možné zneužití neautentizovaným útočníkem, zatímco ostatní zranitelnosti vyžadují autentizovaný přístup. Úspěšné zneužití může vést ke kompletnímu převzetí kompromitovaného systému. Dotčené jsou verze Ivanti Neurons for ITSM On-Prem 2025.2, 2025.3, 2025.4 a 2026.1 a cloudová verze 2026.2 před aplikací oprav. 📌Doporučujeme aktualizovat na bezpečnostní záplaty vydané v září 2026 pro verze 2025.2/2025.3/2025.4/2026.1 nebo na verzi 2026.2 (patched), která je již opravena.
Post summary
The post alerts to a set of high‑severity remote code execution vulnerabilities in Ivanti Neurons for ITSM and recommends applying the September 2026 security patches or using the already patched 2026.2 release.
11010821
4.3K followersView on X
SecureShield@SecureShield_46d
General
一次情報(NVD): https://nvd.nist.gov/vuln/detail/CVE-2026-12645 参照元(ベンダー等): https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US
Post summary
The post simply lists links to the NVD entry and a vendor advisory for CVE-2026-12645, without providing any exploitation details or patch information.
0000034
25 followersView on X
Kaitan ID Security@KaitanSecurity46d
Patch
🚨 CRITICAL — CVE-2026-12645 A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker t… CVSS 9.9 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-12645 #Ivanti #CyberSecurity #InfoSec
Post summary
CVE-2026-12645 is a Missing Authorization vulnerability in Ivanti Neurons for ITSM with a CVSS score of 9.9, but no patch has been released yet. No PoC, exploit, or evidence of active exploitation is reported.
0000037
86 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ivanti	neurons_for_itsm	2025.2	-	-
App	ivanti	neurons_for_itsm	2025.3	-	-
App	ivanti	neurons_for_itsm	2025.4	-	-
App	ivanti	neurons_for_itsm	2026.1	-	-
App	ivanti	neurons_for_itsm	2026.2	-	-

Explore more

Back to dashboard ivanti CVEs neurons_for_itsm vulnerabilities

What researchers are saying

CVE-2026-12645

YogSotho[verified]@YogSoth0General

The post enumerates a list of CVEs for Ivanti Neurons for ITSM without providing any technical, exploit, or mitigation details.

GovCERT.CZ[verified]@GOVCERT_CZPatch

The post alerts to a set of high‑severity remote code execution vulnerabilities in Ivanti Neurons for ITSM and recommends applying the September 2026 security patches or using the already patched 2026.2 release.

SecureShield[verified]@SecureShield_General

The post simply lists links to the NVD entry and a vendor advisory for CVE-2026-12645, without providing any exploitation details or patch information.

Kaitan ID Security[verified]@KaitanSecurityPatch

CVE-2026-12645 is a Missing Authorization vulnerability in Ivanti Neurons for ITSM with a CVSS score of 9.9, but no patch has been released yet. No PoC, exploit, or evidence of active exploitation is reported.