Read the docs
TI-2026-08444 Aliases CVE-2026-9614GHSA-x7fw-vc93-jg9v

Improper access control in Ivanti Neurons for ITSM

Priority MEDIUM 43CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.

Summary

An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0144 73rd percentileScored 2026-11-07
Fix Fixed Neurons for ITSM (On-Premises) (Ivanti): 2025.4 Patch 1, 2025.3 Patch 1, 2025.2 Patch 1Neurons for ITSM (Cloud) (Ivanti): 2026.1 Patch 9, 2026.2 Patch 1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IvantiNeurons for ITSM (On-Premises)—2025.4 Patch 1, 2025.3 Patch 1, 2025.2 Patch 1Patch availableCNA
IvantiNeurons for ITSM (Cloud)—2026.1 Patch 9, 2026.2 Patch 1Patch availableCNA
  • Neurons for ITSM (On-Premises) VendorIvanti Affected — Fixed in 2025.4 Patch 1, 2025.3 Patch 1, 2025.2 Patch 1 Patch available CNA
  • Neurons for ITSM (Cloud) VendorIvanti Affected — Fixed in 2026.1 Patch 9, 2026.2 Patch 1 Patch available CNA

Remediation

  • Fix · CNA Neurons for ITSM (On-Premises) (Ivanti) Fixed in 2025.4 Patch 1, 2025.3 Patch 1, 2025.2 Patch 1
  • Fix · CNA Neurons for ITSM (Cloud) (Ivanti) Fixed in 2026.1 Patch 9, 2026.2 Patch 1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-9614
  2. 2026-10-03 Alias added: GHSA-x7fw-vc93-jg9v

References

Other 1

  • TI-2026-09047 OS command injection in Ivanti Sentry KEVCVSS 3.1CRITICAL 10.0
  • TI-2026-01051 A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-00997 A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-16349 Stack-based buffer overflow in Ivanti Connect Secure KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-12207 Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and… KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-12206 Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and… KEVCVSS 3.1CRITICAL 9.8
See all 524 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences