CVE-2026-12744Patch(ivanti / neurons_for_itsm)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch ivanti neurons_for_itsm systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.

ivanti CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

neurons_for_itsm

Threat summary

Patch or workaround signal is available
6 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 4 signals
Technical details provided in 5 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-09-10); latest day: 1
6 total mentions across 5 days

Affected systems

Vendors

ivanti

Products

neurons_for_itsm

5 versions affected across 1 product

Deep dive

Activity timeline6 mentions / 5d

Signal classification3 categories

Patch

466.7%

Disclosure

116.7%

General

116.7%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-08	1	Disclosure1
2026-09-09	1	Patch1
2026-09-10	2	General1Patch1
2026-09-11	1	Patch1
2026-09-14	1	Patch1

Full discourse6 posts

YogSotho@YogSoth044d
General
☢️☢️ Ivanti Multi Exploits Framework - for the September 2026 Ivanti Neurons for ITSM CVE cluster ☢️☢️ | CVE-2026-12744 | | CVE-2026-12745 | | CVE-2026-12648 | | CVE-2026-12650 | | CVE-2026-12651 | | CVE-2026-12645 | | CVE-2026-12646 | | CVE-2026-12647 | #ivanti #0days #exploit #security #cybersecurity #cve #rce #antisec #brokensec
Post summary
The tweet merely enumerates a set of Ivanti Neurons for ITSM CVEs without providing PoC, exploit details, active exploitation evidence, or patch information.
030168795
2.0K followersView on X
GovCERT.CZ@GOVCERT_CZ44d
Patch
🚨 Upozorňujeme na sérii kritických zranitelností v Ivanti Neurons for ITSM. Společnost Ivanti zveřejnila celkem sedm zranitelností (CVE-2026-12744, CVE-2026-12745, CVE-2026-12651, CVE-2026-12650, CVE-2026-12648, CVE-2026-12645, CVE-2026-12646 a CVE-2026-12647) s CVSS skóre až 9.9. Zranitelnosti mohou vzdálenému útočníkovi umožnit spuštění libovolného kódu na serveru. V případě CVE-2026-12744 a CVE-2026-12745 je možné zneužití neautentizovaným útočníkem, zatímco ostatní zranitelnosti vyžadují autentizovaný přístup. Úspěšné zneužití může vést ke kompletnímu převzetí kompromitovaného systému. Dotčené jsou verze Ivanti Neurons for ITSM On-Prem 2025.2, 2025.3, 2025.4 a 2026.1 a cloudová verze 2026.2 před aplikací oprav. 📌Doporučujeme aktualizovat na bezpečnostní záplaty vydané v září 2026 pro verze 2025.2/2025.3/2025.4/2026.1 nebo na verzi 2026.2 (patched), která je již opravena.
Post summary
The notice informs of seven newly disclosed high‑severity vulnerabilities in Ivanti Neurons for ITSM, warns of potential remote code execution, and provides available patches released in September 2026.
11010821
4.3K followersView on X
CCB Alert@CCBalert43d
Patch
Warning: Critical vulnerabilities in #Ivanti Neurons for ITSM allow arbitrary code execution. #RCE CVE-2026-12647 CVSS: 9.9, CVE-2026-12744 CVSS: 9.8, CVE-2026-12745 CVSS: 9.8. Read our advisory: https://ccb.belgium.be/advisories/warning-missing-authorization-and-deserialization-vulnerabilities-ivanti-neurons-itsm and #Patch #Patch #Patch
Post summary
The post warns of critical RCE vulnerabilities (CVE-2026-12647/12744/12745) in Ivanti Neurons for ITSM, provides CVSS scores, and directs readers to an advisory that includes patching information.
00010293
7.2K followersView on X
セキュリティ対策Lab@securityLab_jp41d
Patch
Ivanti Neurons for ITSMに8件の脆弱性、EPMMにも権限昇格　未認証RCEを含む9件を修正(CVE-2026-12744,CVE-2026-12745)他 https://rocket-boys.co.jp/security-measures-lab/ivanti-neurons-cve-2026-12744-update/ #セキュリティ対策Lab #security #securitynews #セキュリティ
Post summary
The tweet announces that Ivanti has released fixes for 9 vulnerabilities (including unauthenticated RCE and privilege escalation) affecting Neurons for ITSM and EPMM, citing specific CVE identifiers.
00000173
681 followersView on X
Venkata Satish Guttula 🛰️@snakeyesV145d
Patch
News: Ivanti Neurons for ITSM has 6 critical RCEs (CVSS up to 9.9). CVE-2026-12744 and CVE-2026-12745 need no login. Sentry and EPMM got auth-bypass fixes too. Apply the Sep 2026 updates now. https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/
Post summary
Ivanti Neurons for ITSM suffers from six critical RCE flaws (CVSS up to 9.9) including CVE-2026-12744 and CVE-2026-12745, which are addressed in September 2026 updates.
00000104
3.0K followersView on X
Kaitan ID Security@KaitanSecurity46d
Disclosure
🚨 CRITICAL — CVE-2026-12744 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthentica… CVSS 9.8 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-12744 #Ivanti #CyberSecurity #InfoSec
Post summary
A critical deserialization vulnerability (CVE‑2026‑12744) affecting Ivanti Neurons for ITSM before version 2026.2 has been disclosed with a CVSS score of 9.8, and no patch is available yet.
0000047
86 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ivanti	neurons_for_itsm	2025.2	-	-
App	ivanti	neurons_for_itsm	2025.3	-	-
App	ivanti	neurons_for_itsm	2025.4	-	-
App	ivanti	neurons_for_itsm	2026.1	-	-
App	ivanti	neurons_for_itsm	2026.2	-	-

Explore more

Back to dashboard ivanti CVEs neurons_for_itsm vulnerabilities

What researchers are saying

CVE-2026-12744

YogSotho[verified]@YogSoth0General

The tweet merely enumerates a set of Ivanti Neurons for ITSM CVEs without providing PoC, exploit details, active exploitation evidence, or patch information.

GovCERT.CZ[verified]@GOVCERT_CZPatch

The notice informs of seven newly disclosed high‑severity vulnerabilities in Ivanti Neurons for ITSM, warns of potential remote code execution, and provides available patches released in September 2026.

セキュリティ対策Lab[verified]@securityLab_jpPatch

The tweet announces that Ivanti has released fixes for 9 vulnerabilities (including unauthenticated RCE and privilege escalation) affecting Neurons for ITSM and EPMM, citing specific CVE identifiers.

Venkata Satish Guttula 🛰️[verified]@snakeyesV1Patch

Ivanti Neurons for ITSM suffers from six critical RCE flaws (CVSS up to 9.9) including CVE-2026-12744 and CVE-2026-12745, which are addressed in September 2026 updates.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

A critical deserialization vulnerability (CVE‑2026‑12744) affecting Ivanti Neurons for ITSM before version 2026.2 has been disclosed with a CVSS score of 9.8, and no patch is available yet.

CCB Alert@CCBalertPatch

The post warns of critical RCE vulnerabilities (CVE-2026-12647/12744/12745) in Ivanti Neurons for ITSM, provides CVSS scores, and directs readers to an advisory that includes patching information.