CVE-2026-12651

Ivanti Neurons for ITSM versions before 2026.2 are affected by a Deserialization of Untrusted Data vulnerability (CVE-2026-12651). A remote authenticated attacker can leverage this flaw to execute arbitrary code on the server, rated CVSS 8.8 (HIGH) with high impact to confidentiality, integrity, ...

EUVD-2026-72804

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-12745

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-12745

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-12745

Ivanti Neurons for ITSM versions before 2026.2 are affected by a Deserialization of Untrusted Data vulnerability that allows a remote unauthenticated attacker to execute arbitrary code on the server. The assigned CVSS 3.1 score is 9.8 (CRITICAL) , with a network attack vector, low complexity, no ...

CVE-2026-12744

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating n...

EUVD-2026-72797

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-12744

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

CVE-2026-12744

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

Security Advisory Ivanti Neurons for ITSM (Multiple CVEs)

Summary Ivanti has released updates for Ivanti Neurons for ITSM N-ITSM which addresses High and Critical severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Additionally, it’s important for customers to know that these...

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...

Windows IP Address Management (IPAM) Service Elevation of Privilege Vulnerability

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

Microsoft Office Publisher Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-77092

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...

CVE-2026-16502

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input . This makes it possible for authenticated attackers, with contributor-level access and above, to injec...

CVE-2026-77092 Content Extractor Privilege Escalation

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...

EUVD-2026-72724

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...

CVE-2026-77092

Commvault Content Extractor contained a deserialization of untrusted data flaw affecting privilege management , enabling privilege escalation . The NVD-assigned CVSS 3.1 score is 9.8 (CRITICAL) with a network vector and no required privileges, while the CNA-assigned CVSS 4.0 score is 7.3 (HIGH) w...