{"cves":{"cve":{"cveNumber":"CVE-2026-12648","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12648"}},"description":"Ivanti Neurons for ITSM是Ivanti公司推出的现代化IT服务管理（ITSM）软件。\n\nIvanti Neurons for ITSM存在反序列化漏洞，该漏洞源于对不可信数据未能正确处理反序列化过程，攻击者可利用该漏洞在服务器上执行任意代码。","formalWay":"目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US","isEvent":"通用软硬件漏洞","number":"CNVD-2026-37873","openTime":"2026-09-20","patchDescription":"Ivanti Neurons for ITSM是Ivanti公司推出的现代化IT服务管理（ITSM）软件。\r\n\r\nIvanti Neurons for ITSM存在反序列化漏洞，该漏洞源于对不可信数据未能正确处理反序列化过程，攻击者可利用该漏洞在服务器上执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。","patchName":"Ivanti Neurons for ITSM反序列化漏洞（CNVD-2026-37873）的补丁","products":{"product":"Ivanti Neurons for ITSM <2026.2"},"referenceLink":"https://nvd.nist.gov/vuln/detail/cve-2026-12648","serverity":"高","submitTime":"2026-09-11","title":"Ivanti Neurons for ITSM反序列化漏洞（CNVD-2026-37873）"}