39 matches found
itsm-exploit
Exploits for Ivanti Neurons for ITSM On Premise This script exploits several flaws that allow an unauthenticated attacker to gain administrator access and execute remote commands CVE-2023-46808 on Ivanti Neurons for ITSM On Premise. For technical details, see Technical Details Affected versions...
Vulnerabilities in Ivanti Neurons for ITSM
Ivanti has addressed several vulnerabilities in Ivanti Neurons for ITSM. A malicious individual could exploit these vulnerabilities to perform unauthorized actions, including executing arbitrary code on the server. Ivanti released an update in version 2026.2 to fix these vulnerabilities. See the...
CVE-2026-12744
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...
CVE-2026-12745
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...
CVE-2026-12647
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12645
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12647
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
EUVD-2026-72815
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
EUVD-2026-72814
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12648
CVE-2026-12648 is a Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM versions prior to 2026.2 . A remote authenticated attacker with low privileges can exploit this flaw to achieve arbitrary code execution on the server, with low attack complexity and no user interaction...
CVE-2026-12648
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
EUVD-2026-72810
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12650
Ivanti Neurons for ITSM before version 2026.2 is affected by a Deserialization of Untrusted Data vulnerability that allows a remote authenticated attacker to execute arbitrary code on the server. The flaw is rated CVSS 9.9 (Critical) with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, reflectin...
CVE-2026-12651
Ivanti Neurons for ITSM versions before 2026.2 are affected by a Deserialization of Untrusted Data vulnerability (CVE-2026-12651). A remote authenticated attacker can leverage this flaw to execute arbitrary code on the server, rated CVSS 8.8 (HIGH) with high impact to confidentiality, integrity, ...
EUVD-2026-72806
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...