Description
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | Neurons for ITSM | — | 2026.2 |
Advisories 2
- NCSC-2026-0358 Kwetsbaarheden verholpen in Ivanti Neurons for ITSM NCSC-NL (Netherlands) · Sep 9, 2026
- WID-SEC-2026-3272 Ivanti Neurons for ITSM: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 8, 2026