Description
An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | Neurons for ITSM (On-Premises) | — | 2025.4 Patch 1 |
| Ivanti | Neurons for ITSM (Cloud) | — | 2026.1 Patch 9 |
Advisories 1
- WID-SEC-2026-1767 Ivanti Neurons for ITSM: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jun 1, 2026