CVE-2026-9614 | THREATINT

Description

An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.

PUBLISHED Reserved 2026-05-26 | Published 2026-06-01 | Updated 2026-06-02 | Assigner ivanti

HIGH: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-284: Improper Access Control

Product status

Default status

affected

2025.4 Patch 1 (custom)

unaffected

2025.3 Patch 1 (custom)

unaffected

2025.2 Patch 1 (custom)

unaffected

Default status

affected

2026.1 Patch 9 (custom)

unaffected

2026.2 Patch 1 (custom)

unaffected

References

hub.ivanti.com/...sory-Ivanti-Neurons-for-ITSM-CVE-2026-9614

cve.org (CVE-2026-9614)

nvd.nist.gov (CVE-2026-9614)

Download JSON