VulnSocial

CVE-2026-9614Patch

MEDIUMCVSS 8.8 · HIGH

Exploitation observed; activity peaked at 5 mentions and remains active

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-284

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 15 mentions across 6 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 7 signals
  • Technical details provided in 11 signals
  • Disclosure: 4 classified signals
  • General: 3 classified signals
  • Peaked 2d ago at 5 mentions (2026-06-04); latest day: 1
  • 15 total mentions across 6 days

Deep dive

Activity timeline15 mentions / 6d
01345Mentions · 2026-06-01: 1Mentions · 2026-06-02: 3Mentions · 2026-06-03: 4Mentions · 2026-06-04: 5Mentions · 2026-06-10: 1Mentions · 2026-06-11: 1Active Exploitation · 2026-06-04: 1Patch / Workaround · 2026-06-02: 2Patch / Workaround · 2026-06-03: 2Patch / Workaround · 2026-06-04: 2Patch / Workaround · 2026-06-11: 1Technical Details · 2026-06-01: 1Technical Details · 2026-06-02: 2Technical Details · 2026-06-03: 3Technical Details · 2026-06-04: 4Technical Details · 2026-06-11: 106-0106-0206-0306-0406-1006-11
Signal classification4 categories
Patch
746.7%
Disclosure
426.7%
General
320.0%
Active Exploitation
16.7%
Referenced assets12 URLs
By indicator
Classification over time
DateTotalLabels
2026-06-011
Disclosure1
2026-06-023
General1Patch2
2026-06-034
Disclosure2Patch2
2026-06-045
Active Exploitation1Disclosure1General1Patch2
2026-06-101
General1
2026-06-111
Patch1
Full discourse15 posts
  • GovCERT.CZ@GOVCERT_CZ
    Patch

    🚨 Upozorňujeme na zranitelnost v Ivanti Neurons for ITSM, CVE-2026-9614. Tato zranitelnost umožňuje vzdálenému autentizovanému útočníkovi s nízkými oprávněními eskalovat oprávnění a získat administrátorský přístup v postižených prostředích. Úspěšné zneužití může vést k neoprávněnému přístupu k citlivým informacím, změnám konfigurace systémů, narušení služeb a dalšímu kompromitování infrastruktury. Zranitelnost se týká verzí Ivanti Neurons for ITSM On-Premises 2025.4 a starších a Cloud 2026.1 a starších, přičemž byla opravena ve verzích On-Premises 2025.4 Patch 1, 2025.3 Patch 1, 2025.2 Patch 1 a v cloudových verzích 2026.1 Patch 9 a 2026.2 Patch 1, kde jsou aktualizace aplikovány automaticky. 📌 Doporučujeme aktualizovat na nejnovější verzi.

    Post summary

    The post alerts on CVE-2026-9614, a remote authenticated privilege‑escalation flaw in Ivanti Neurons for ITSM, provides patch guidance, and advises updating to the latest release.

    02020434
    4.2K followersView on X
  • Stanislav Klevtsov@stansecure
    General

    Top #CVE to prioritize 👀 - @Android Framework #privesc (CVE-2025-48595) - @SolarWinds Serv-U (CVE-2026-28318) - @Cisco Catalyst SD-WAN Manager (CVE-2026-20245) - @Cisco Unified Communications Manager (CVE-2026-20230) - @Acer Wave 7 routers (CVE-2026-49200/49201) - @UniFi OS Server (CVE-2026-34908/34909) - @Google Chrome (CVE-2026-10881/10882/10883) - #MCP Toolbox (CVE-2026-9739) - @Ivanti ISTM (CVE-2026-9614) - @Atlassian Bamboo Data Center #RCE (CVE-2026-27727)

    Post summary

    The tweet enumerates several CVEs as priorities for attention but offers no specific technical, exploit, or mitigation information.

    10000130
    42 followersView on X
  • Cyber Edition@CyberEdition
    Patch

    ⚠️ Ivanti fixed a high-severity flaw (CVE-2026-9614) in Neurons for ITSM that could let a low-privileged user gain full admin access. On-prem users should patch immediately and review privileged activity for signs of abuse. https://thecyberedition.com/ivanti-itsm-admin-access-vulnerability/ #CyberSecurity #Ivanti

    Post summary

    Ivanti has released a patch for the high‑severity CVE‑2026‑9614 privilege escalation flaw in Neurons for ITSM; users are urged to update immediately and monitor for abuse.

    0001060
    729 followersView on X
  • UNDERCODE NEWS@UndercodeNews
    Disclosure

    🚨 Ivanti Neurons ITSM Security Shock: #CVE-2026-9614 Opens the Door to Full Administrator Takeover in Enterprise Systems + Video -Fact Checker: ✅: 0 ❌: 2 || 0/2 → Score: 0% 🤏🏻 -Prediction: 📈 1 Positive | 📉 1 Negative http://undercodenews.com/ivanti-neurons-itsm-security-shock-cve-2026-9614-opens-the-door-to-full-administrator-takeover-in-enterprise-systems-video/

    Post summary

    The tweet announces a new CVE that allegedly enables full administrator takeover, but it offers no proof‑of‑concept, exploit code, or evidence of active exploitation, and it does not discuss any patch or remediation.

    0001051
    881 followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: #Ivanti patched a new vulnerability (CVE-2026-9614; CVSS: 8.8) in it's Ivanti: Neurons for ITSM (On-Premises) product. The vulnerability can allow a remote authenticated attacker to gain administrative access. Time to #Patch #Patch #Patch

    Post summary

    Ivanti has released a patch for CVE-2026-9614, a high-severity (CVSS 8.8) flaw that allows remote authenticated attackers to obtain administrative access to Ivanti: Neurons for ITSM on-premises. Users should apply the patch promptly.

    01000199
    7.2K followersView on X
  • iototsecnews@iototsecnews
    Patch

    Ivanti Neurons for ITSM の脆弱性 CVE-2026-9614 が FIX：管理者権限奪取の可能性 https://iototsecnews.jp/2026/06/03/ivanti-itsm-flaw-could-allow-attackers-to-escalate-to-admin-access/ 今回の Ivanti Neurons for ITSM における脆弱性 CVE-2026-9614 は、アプリケーション内部における不十分な認可チェックに起因します。これにより、本来であれば厳格に制限されているはずのロールベース・アクセス制御が適切に機能せず、攻撃者に回避されてしまいます。低い権限しか持たないリモート・ユーザーであっても、操作の制限をすり抜けて最上位の管理者権限を奪うことができる状態になっています。ご利用のチームは、ご注意ください。 #CVE20269614 #Ivanti #NeuronsforITSM #Vulnerability

    Post summary

    The post reports that CVE‑2026‑9614, a privilege‑escalation vulnerability in Ivanti Neurons for ITSM caused by insufficient authorization checks, has been fixed, urging teams to remain vigilant.

    00000108
    497 followersView on X
  • Crypto Master💎 Arichain@Vijaykiran0987
    Disclosure

    Ivanti ITSM CVE-2026-9614 Flaw Lets Attackers Gain Admin Access https://thecybrdef.com/ivanti-itsm-cve-2026-9614-flaw-lets-attackers-gain-admin-access/ #Cybertrending #Cybernewsdaily #Cybersecurity

    Post summary

    The post announces a newly disclosed vulnerability (CVE-2026-9614) in Ivanti ITSM that enables remote attackers to obtain administrative access.

    0000040
    64 followersView on X
  • The Daily Tech Feed@dailytechonx
    Patch

    Critical vulnerability in Ivanti Neurons for ITSM (CVE-2026-9614) allows privilege escalation to admin. Immediate patching recommended! Link: https://thedailytechfeed.com/ivanti-itsm-flaw-allows-privilege-escalation-patch-urgently-needed-for-cve-2026-9614/ #Ivanti #Neurons #ITSM #CVE20269614 #Vulnerability #PrivilegeEscalation #Admin #Patching #Security #Cybersecurity #Infosec #Exploit #Risk #Threat #Exposure #Mitigation #Advisory #Software #Enterprise #Alert

    Post summary

    Ivanti Neurons for ITSM vulnerability CVE-2026-9614 permits privilege escalation to admin; immediate patching is recommended.

    0000039
    351 followersView on X
  • セキュリティ対策Lab@securityLab_jp
    General

    Ivanti Neurons for ITSMに管理者権限取得の脆弱性 CVE-2026-9614 https://rocket-boys.co.jp/security-measures-lab/ivanti-neurons-itsm-admin-privilege-vulnerability-cve-2026-9614/ #セキュリティ対策Lab #security #securitynews

    Post summary

    The article identifies an admin‑privilege escalation vulnerability in Ivanti Neurons for ITSM (CVE‑2026‑9614) but provides no additional details, proofs, or mitigation information.

    00000119
    409 followersView on X
  • ThreadLinqs@threadlinqs
    Active Exploitation

    NEW THREAT INTEL: Ivanti Neurons ITSM CVE-2026-9614 - low-priv user escalates to admin (CVSS 8.8). 9 detections. https://intel.threadlinqs.com/threat/TL-2026-0676 #ThreatIntel #CyberSecurity #Ivanti https://t.co/T7UbDW4o0X

    Post summary

    New threat intel reports multiple detections of CVE‑2026‑9614, a privilege‑escalation flaw in Ivanti Neurons ITSM with a CVSS score of 8.8, indicating active exploitation in the wild.

    0000065
    54 followersView on X
  • UNDERCODE TESTING@UndercodeUpdate
    Disclosure

    🚨 Ivanti Neurons for ITSM 权限提升漏洞 (#CVE-2026-9614): 从低权限用户到 IT 服务台全权控制的“特快通道” https://undercodetesting.com/ivanti-neurons-for-itsm-%e6%9d%83%e9%99%90%e6%8f%90%e5%8d%87%e6%bc%8f%e6%b4%9e-cve-2026-9614-%e4%bb%8e%e4%bd%8e%e6%9d%83%e9%99%90%e7%94%a8%e6%88%b7%e5%88%b0-it-%e6%9c%8d%e5%8a%a1%e5%8f%b0%e5%85%a8/ Educational Purposes!

    Post summary

    The text announces the discovery of a privilege‑exploitation vulnerability (CVE‑2026‑9614) in Ivanti Neurons for ITSM, but it does not provide technical details, PoC, or exploitation evidence.

    0000036
    592 followersView on X
  • ThreatCluster@threatcluster
    Patch

    BREAKING: Ivanti warns CVE-2026-9614 in Neurons for ITSM lets authenticated users escalate to full admin on cloud and on-prem installs, patch now available. https://threatcluster.io/cluster/ivanti-itsm-vulnerability-allows-privilege-escalation-for-au-62e87f73

    Post summary

    Ivanti has released a warning about CVE-2026-9614, which permits privileged escalation, and issued a patch to address the vulnerability.

    0000061
    290 followersView on X
  • The Daily Tech Feed@dailytechonx
    Patch

    A critical vulnerability (CVE-2026-9614) in Ivanti's Neurons for ITSM allows authenticated attackers to escalate privileges to admin levels. Both cloud and on-premises deployments are affected. Ivanti has released patches; organizations should update immediately to mitigate this significant security risk. #Ivanti #ITSM #CyberSecurity #Vulnerability #AdminPrivilege #SecurityUpdate https://thedailytechfeed.com/ivanti-itsm-flaw-allows-attackers-to-gain-admin-privileges/

    Post summary

    The tweet highlights a critical privilege‑escalation flaw in Ivanti's Neurons for ITSM, announces that patches are available, and urges users to update immediately.

    0000040
    352 followersView on X
  • Autumn Good@autumn_good_35
    General

    『Ivanti recommends that customers audit role configurations to ensure permissions are limited to intended administrative roles.』 Security Advisory Ivanti Neurons for ITSM (CVE-2026-9614) https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2026-9614?language=en_US

    Post summary

    The advisory advises auditing role configurations for the CVE-2026-9614 vulnerability but does not disclose PoC, exploit details, active exploitation evidence, or patch information.

    00000366
    6.9K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-9614 An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticat… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-9614 #Ivanti #CyberSecurity #InfoSec

    Post summary

    The tweet announces a high‑severity CVE‑2026‑9614, describing an Improper Access Control flaw in Ivanti Neurons for ITSM with a CVSS score of 8.8, and links to a full analysis.

    0000059
    85 followersView on X

Explore more

Back to dashboard