Ivanti ITSM Flaw Could Allow Attackers to Escalate to Admin Access

Gbhackers •Divya • June 3, 2026

Ivanti has patched a high-severity vulnerability in its Ivanti Neurons for ITSM platform that could allow authenticated attackers to escalate privileges and gain full administrative access to affected systems. Tracked as CVE-2026-9614, the flaw is classified as an improper access control issue (CWE-284) and carries a CVSS score of 8.8. The vulnerability affects both cloud […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ivanti ITSM Vulnerability Allows Privilege Escalation for Authenticated Users Ivanti disclosed a high-severity vulnerability in its Ivanti Neurons for ITSM platform, tracked as CVE-2026-9614, which allows attackers with valid credentials to escalate privileges and gain full administrative access. The flaw affects both cloud and on-premises deployments and has a CVSS score of 8.8, indicating a significant security risk. The vulnerability is classified as an improper access control issue (CWE-284). A patch has been released to address this vulnerability, and organizations are urged to apply it promptly to mitigate the risk of exploitation. This vulnerability poses a critical threat to enterprise environments utilizing Ivanti's ITSM solutions. 3 sources 71

Extracted Entities

Ivanti ITSM Flaw Could Allow Attackers to Escalate to Admin Access

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)