CVE-2026-9614 — Ivanti / Neurons for ITSM (On-Premises)

CVE-2026-9614

Ivanti / Neurons for ITSM (On-Premises) PUBLISHED

Description (CNA)

An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.

Affected (CNA)

Vendor / product	Versions
Ivanti / Neurons for ITSM (On-Premises)	unaffected 2025.4 Patch 1; unaffected 2025.3 Patch 1; unaffected 2025.2 Patch 1
Ivanti / Neurons for ITSM (Cloud)	unaffected 2026.1 Patch 9; unaffected 2026.2 Patch 1

CWE

CWE-284

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2026-9614

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.