CVE-2026-12745Patch(ivanti / neurons_for_itsm)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch ivanti neurons_for_itsm systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.

ivanti CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

neurons_for_itsm

Threat summary

Patch or workaround signal is available
6 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 5 signals
Technical details provided in 5 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-09-10); latest day: 1
6 total mentions across 5 days

Affected systems

Vendors

ivanti

Products

neurons_for_itsm

4 versions affected across 1 product

Deep dive

Activity timeline6 mentions / 5d

Signal classification3 categories

Patch

466.7%

Disclosure

116.7%

General

116.7%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-08	1	Disclosure1
2026-09-09	1	Patch1
2026-09-10	2	General1Patch1
2026-09-11	1	Patch1
2026-09-14	1	Patch1

Full discourse6 posts

YogSotho@YogSoth044d
General
☢️☢️ Ivanti Multi Exploits Framework - for the September 2026 Ivanti Neurons for ITSM CVE cluster ☢️☢️ | CVE-2026-12744 | | CVE-2026-12745 | | CVE-2026-12648 | | CVE-2026-12650 | | CVE-2026-12651 | | CVE-2026-12645 | | CVE-2026-12646 | | CVE-2026-12647 | #ivanti #0days #exploit #security #cybersecurity #cve #rce #antisec #brokensec
Post summary
The tweet merely lists a set of CVE identifiers with no additional information on exploitation, patches, or technical details.
030168795
2.0K followersView on X
GovCERT.CZ@GOVCERT_CZ45d
Patch
🚨 Upozorňujeme na sérii kritických zranitelností v Ivanti Neurons for ITSM. Společnost Ivanti zveřejnila celkem sedm zranitelností (CVE-2026-12744, CVE-2026-12745, CVE-2026-12651, CVE-2026-12650, CVE-2026-12648, CVE-2026-12645, CVE-2026-12646 a CVE-2026-12647) s CVSS skóre až 9.9. Zranitelnosti mohou vzdálenému útočníkovi umožnit spuštění libovolného kódu na serveru. V případě CVE-2026-12744 a CVE-2026-12745 je možné zneužití neautentizovaným útočníkem, zatímco ostatní zranitelnosti vyžadují autentizovaný přístup. Úspěšné zneužití může vést ke kompletnímu převzetí kompromitovaného systému. Dotčené jsou verze Ivanti Neurons for ITSM On-Prem 2025.2, 2025.3, 2025.4 a 2026.1 a cloudová verze 2026.2 před aplikací oprav. 📌Doporučujeme aktualizovat na bezpečnostní záplaty vydané v září 2026 pro verze 2025.2/2025.3/2025.4/2026.1 nebo na verzi 2026.2 (patched), která je již opravena.
Post summary
The post discloses seven critical remote code execution CVEs in Ivanti Neurons for ITSM, details CVSS scores and authentication conditions, and urges users to apply the September 2026 patches or upgrade to the patched 2026.2 release.
11010821
4.3K followersView on X
CCB Alert@CCBalert44d
Patch
Warning: Critical vulnerabilities in #Ivanti Neurons for ITSM allow arbitrary code execution. #RCE CVE-2026-12647 CVSS: 9.9, CVE-2026-12744 CVSS: 9.8, CVE-2026-12745 CVSS: 9.8. Read our advisory: https://ccb.belgium.be/advisories/warning-missing-authorization-and-deserialization-vulnerabilities-ivanti-neurons-itsm and #Patch #Patch #Patch
Post summary
Critical RCE CVEs in Ivanti Neurons for ITSM are disclosed with high CVSS scores, and the advisory directs readers to patch guidance.
00010293
7.2K followersView on X
セキュリティ対策Lab@securityLab_jp41d
Patch
Ivanti Neurons for ITSMに8件の脆弱性、EPMMにも権限昇格　未認証RCEを含む9件を修正(CVE-2026-12744,CVE-2026-12745)他 https://rocket-boys.co.jp/security-measures-lab/ivanti-neurons-cve-2026-12744-update/ #セキュリティ対策Lab #security #securitynews #セキュリティ
Post summary
The snippet reports vulnerabilities affecting Ivanti Neurons for ITSM and EPMM, including unauthenticated RCE and privilege escalation, and says nine are fixed. It does not mention PoC/exploit code, active exploitation, or false-positive claims.
00000173
681 followersView on X
Venkata Satish Guttula 🛰️@snakeyesV146d
Patch
News: Ivanti Neurons for ITSM has 6 critical RCEs (CVSS up to 9.9). CVE-2026-12744 and CVE-2026-12745 need no login. Sentry and EPMM got auth-bypass fixes too. Apply the Sep 2026 updates now. https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/
Post summary
The article announces six critical RCE vulnerabilities in Ivanti Neurons for ITSM, including CVE‑2026‑12744 and CVE‑2026‑12745, and urges users to apply the September 2026 security updates.
00000104
3.0K followersView on X
Kaitan ID Security@KaitanSecurity46d
Disclosure
🚨 CRITICAL — CVE-2026-12745 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthentica… CVSS 9.8 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-12745 #Ivanti #CyberSecurity #InfoSec
Post summary
The post announces a critical deserialization vulnerability (CVE‑2026‑12745) in Ivanti Neurons for ITSM, notes no patch is available, and links to a full analysis.
0000041
86 followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ivanti	neurons_for_itsm	2025.2	-	-
App	ivanti	neurons_for_itsm	2025.3	-	-
App	ivanti	neurons_for_itsm	2025.4	-	-
App	ivanti	neurons_for_itsm	2026.2	-	-

Explore more

Back to dashboard ivanti CVEs neurons_for_itsm vulnerabilities

What researchers are saying

CVE-2026-12745

YogSotho[verified]@YogSoth0General

The tweet merely lists a set of CVE identifiers with no additional information on exploitation, patches, or technical details.

GovCERT.CZ[verified]@GOVCERT_CZPatch

The post discloses seven critical remote code execution CVEs in Ivanti Neurons for ITSM, details CVSS scores and authentication conditions, and urges users to apply the September 2026 patches or upgrade to the patched 2026.2 release.

セキュリティ対策Lab[verified]@securityLab_jpPatch

The snippet reports vulnerabilities affecting Ivanti Neurons for ITSM and EPMM, including unauthenticated RCE and privilege escalation, and says nine are fixed. It does not mention PoC/exploit code, active exploitation, or false-positive claims.

Venkata Satish Guttula 🛰️[verified]@snakeyesV1Patch

The article announces six critical RCE vulnerabilities in Ivanti Neurons for ITSM, including CVE‑2026‑12744 and CVE‑2026‑12745, and urges users to apply the September 2026 security updates.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

The post announces a critical deserialization vulnerability (CVE‑2026‑12745) in Ivanti Neurons for ITSM, notes no patch is available, and links to a full analysis.

CCB Alert@CCBalertPatch

Critical RCE CVEs in Ivanti Neurons for ITSM are disclosed with high CVSS scores, and the advisory directs readers to patch guidance.