Ivanti Neurons for ITSM Vulnerability Allows Security Policy Bypass

A security advisory released on 1 June 2026 identifies a vulnerability in Ivanti’s Neurons for ITSM products that enables attackers to bypass security policies. The flaw, assigned CVE‑2026‑9614, affects Neurons for ITSM (Cloud) versions prior to 2026.1 patch 9 and 2026.2 patch 1, as well as On‑Premises versions 2025.2, 2025.3, and 2025.4 before their respective patch 1 releases. Ivanti recommends applying the vendor‑issued patches detailed in their security update bulletin. Users are advised to consult the official Ivanti advisory for patch information and to update their systems promptly to mitigate the risk of policy circumvention. The advisory can be accessed via Ivanti’s blog and support forums.

Summary of content from

source

Made by AI. If you spot anything of concern write us at contact@cybach.com. We’ll promptly correct irregularities.


Posted