Vulnerability intelligence

CVE-2026-4914

Ivanti Neurons for ITSM (On-Premise) CWE-79

Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions. User interaction is required.

CVSS Score

5.4

Medium

EPSS — Exploit Probability

0.3%

Riskier than 27% of all CVEs · checked 2026-09-08

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Apr 15, 2026 · latest Apr 15, 2026

Coverage timeline

Ivanti fixes two medium severity flaws in Neurons for ITSM
www.securityweek.com · Apr 15, 2026

Related CVEs — Ivanti

CVE-2026-12650 CVE-2026-12744 CVE-2026-12745 CVE-2026-12647 CVE-2026-12645 CVE-2026-12646 CVE-2026-83527 CVE-2026-18851