Ivanti ITSM Vulnerability Allows Privilege Escalation for Authenticated Users

Gbhackers

Ivanti ITSM Vulnerability Allows Privilege Escalation for Authenticated Users

First seen 3 Jun 2026, 13:28 UTC • •70.5

Article Content

1 / 5

Browse articles

ThreatCluster •June 4, 2026 at 13:21 UTC

•CVE-2026-9614 allows authenticated attackers to gain admin access.
•The vulnerability affects both cloud and on-premises deployments of Ivanti Neurons for ITSM.
•A patch has been released, and organizations are advised to apply it immediately.

Ivanti disclosed a high-severity vulnerability in its Ivanti Neurons for ITSM platform, tracked as CVE-2026-9614, which allows attackers with valid credentials to escalate privileges and gain full administrative access. The flaw affects both cloud and on-premises deployments and has a CVSS score of 8.8, indicating a significant security risk. The vulnerability is classified as an improper access control issue (CWE-284). A patch has been released to address this vulnerability, and organizations are urged to apply it promptly to mitigate the risk of exploitation. This vulnerability poses a critical threat to enterprise environments utilizing Ivanti's ITSM solutions.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 143d ago How this analysis works

Timeline

2026-06-01

CVE-2026-9614 published

Ivanti disclosed a high-severity vulnerability in its ITSM platform, allowing privilege escalation for authenticated users.

Cybersecuritynews

2026-06-01

Patch released

Ivanti released a patch to fix the vulnerability, urging users to apply it to secure their systems.

More articles in this cluster (4)

Threat Graph

10 entities, 10 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Data Breach
Zero-day Exploit
T1068 - Exploitation for Privilege Escalation

Organization (1)

Ivanti

Vulnerability (1)

CVE-2026-9614

Weakness (1)

CWE-269 - Improper Privilege Management

Affected Platform (2)

Apache ActiveMQ
Ivanti Neurons For ITSM

Threat Actor (1)

The Gentlemen

Tool (1)

GitHub Actions

Relationships

The Gentlemen uses GitHub Actions
The Gentlemen uses Data Breach
The Gentlemen uses Zero-day Exploit
The Gentlemen uses T1068 - Exploitation for Privilege Escalation
The Gentlemen exploits CVE-2026-9614
GitHub Actions exploits CVE-2026-9614
CVE-2026-9614 targets Apache ActiveMQ
CVE-2026-9614 targets Ivanti Neurons For ITSM
The Gentlemen targets Ivanti
The Gentlemen related to CWE-269 - Improper Privilege Management

Following this threat?

Track The Gentlemen, Ivanti and CVE-2026-9614 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Hackers Exploit Firewalls, Compromise 70,000 Credentials Globally A large-scale cyber campaign has targeted exposed network edge devices, specifically Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls, leading to the compromise of over 70,000 credentials. The threat actor, known as k0t, has been active since October 2025 and is linked to ransomware groups like Qilin…

Ransomware Groups Exploit PAN-OS Flaw, Target Critical Infrastructure Ransomware groups, including Qilin and INC, are exploiting a critical authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect and Prisma Access. This flaw allows attackers to establish unauthorized VPN sessions, bypassing multifactor authentication controls. Since its disclosure…