CVE-2026-4914 — Ivanti / Neurons for ITSM (On-Premise)

CVE-2026-4914

Ivanti / Neurons for ITSM (On-Premise) PUBLISHED

Description (CNA)

Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required.

Affected (CNA)

Vendor / product	Versions
Ivanti / Neurons for ITSM (On-Premise)	unaffected 2025.4
Ivanti / Neurons for ITSM (Cloud)	unaffected 2025.4

CWE

CWE-79

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2026-4913-CVE-2026-4914?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.