CVE-2026-9614: High severity Ivanti Ivanti Neurons for ITSM vulnerability

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Configuration

   Limit administrative access to only required users and trusted networks, and enable multi-factor authentication for all administrative accounts where supported.

   Ivanti Neurons for ITSM (cloud and on-premises) administrative access / remote management = restricted to trusted networks; multi-factor authentication enabled
2. Compensating control

   Restrict network access to Ivanti Neurons for ITSM management and administrative interfaces to trusted IPs/networks using firewalls, VPNs, or network ACLs to prevent remote access from untrusted sources.

3. Compensating control

   Increase logging, monitoring and alerting for privilege escalation, unexpected role changes, and anomalous administrative actions; deploy IDS/IPS or WAF rules to detect and block exploitation attempts where possible.

4. Operational

   Audit all administrative accounts and recent administrative activity for signs of compromise; disable or remove any unknown or unused admin accounts and revoke active admin sessions.

5. Operational

   Rotate credentials for administrative accounts and any service accounts that could grant elevated privileges to mitigate potential unauthorized access.

Event History

Frequently Asked Questions