Ivanti ITSM Vulnerability Lets Attackers Gain Admin Privilege

Cybersecuritynews •Abinaya • June 3, 2026

Ivanti has disclosed a high-severity vulnerability in its Ivanti Neurons for ITSM platform that could allow attackers with valid credentials to escalate privileges and gain full administrative access. The flaw, tracked as CVE-2026-9614, affects both cloud and on-premises deployments and has been assigned a CVSS score of 8.8, indicating a significant security risk in enterprise […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ivanti ITSM Vulnerability Allows Privilege Escalation for Authenticated Users Ivanti disclosed a high-severity vulnerability in its Ivanti Neurons for ITSM platform, tracked as CVE-2026-9614, which allows attackers with valid credentials to escalate privileges and gain full administrative access. The flaw affects both cloud and on-premises deployments and has a CVSS score of 8.8, indicating a significant security risk. The vulnerability is classified as an improper access control issue (CWE-284). A patch has been released to address this vulnerability, and organizations are urged to apply it promptly to mitigate the risk of exploitation. This vulnerability poses a critical threat to enterprise environments utilizing Ivanti's ITSM solutions. 3 sources 71

Extracted Entities

Ivanti ITSM Vulnerability Lets Attackers Gain Admin Privilege

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)