Known vulnerabilities in Ivanti Neurons for ITSM 2026.1

Vendor: Ivanti
Software: Ivanti Neurons for ITSM
Version: 2026.1
Software CPE: cpe:2.3:a:ivanti:ivanti_neurons_for_itsm:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ivanti Neurons for ITSM version 2026.1 Ivanti Neurons for ITSM 2026.1 is affected by 8 vulnerabilities: 2 high, 6 medium Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147419 - Deserialization of Untrusted Data
CVE-2026-12745		 CWE-502 High
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147420 - Deserialization of Untrusted Data
CVE-2026-12651		 CWE-502 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147421 - Deserialization of Untrusted Data
CVE-2026-12650		 CWE-502 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147422 - Deserialization of Untrusted Data
CVE-2026-12648		 CWE-502 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147423 - Missing Authorization
CVE-2026-12645		 CWE-862 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147424 - Missing Authorization
CVE-2026-12646		 CWE-862 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147425 - Missing Authorization
CVE-2026-12647		 CWE-862 Medium
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858
#VU147418 - Deserialization of Untrusted Data
CVE-2026-12744		 CWE-502 High
No
No
 2025.2 Sept 2026 Security Patch, 2025.3 Sept 2026 Security Patch, 2025.4 Sept 2026 Security Patch, 2026.1 Sept 2026 Security Patch, 2026.2 08.09.2026 SB2026090858