CVE-2026-12744: A Deserialization of Untrusted Data vulnerability in Ivanti
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
- EPSS 2.2% (81.2% percentile)
- CVSS 9.8 critical