CVE-2026-4913 — Ivanti / Neurons for ITSM (On-Premise)

CVE-2026-4913

Ivanti / Neurons for ITSM (On-Premise) PUBLISHED

Description (CNA)

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.

Affected (CNA)

Vendor / product	Versions
Ivanti / Neurons for ITSM (On-Premise)	unaffected 2025.4
Ivanti / Neurons for ITSM (Cloud)	unaffected 2025.4

CWE

CWE-424

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2026-4913-CVE-2026-4914?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.