Vulnerability intelligence

CVE-2026-4913

Ivanti Neurons for ITSM (On-Premise) CWE-424

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.

CVSS Score

5.7

Medium

EPSS — Exploit Probability

0.6%

Riskier than 46% of all CVEs · checked 2026-09-09

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Apr 15, 2026 · latest Apr 15, 2026

Coverage timeline

Ivanti fixes two medium severity flaws in Neurons for ITSM
www.securityweek.com · Apr 15, 2026

Related CVEs — Ivanti

CVE-2026-12650 CVE-2026-12744 CVE-2026-12745 CVE-2026-12647 CVE-2026-12645 CVE-2026-12646 CVE-2026-83527 CVE-2026-18851