306 matches found
itsm-exploit
Exploits for Ivanti Neurons for ITSM On Premise This script exploits several flaws that allow an unauthenticated attacker to gain administrator access and execute remote commands CVE-2023-46808 on Ivanti Neurons for ITSM On Premise. For technical details, see Technical Details Affected versions...
CVE-2026-109412
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information...
EUVD-2026-98916
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information...
CVE-2026-109412
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information...
CVE-2026-109412
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information...
CVE-2026-109412
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information . The vulnerability is associated with CWE-749 (Exposed Dangerous Method or Function) and carries a CRITICAL CVSS 3.1 score of 9.9. While the impact...
CVE-2026-109412: Exposed Dangerous Method or Function
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information...
PT-2026-111684
Name of the Vulnerable Software and Affected Versions Ivanti Neurons Patch for Intune affected versions not specified Description An exposed dangerous endpoint allows a remote authenticated attacker to leak sensitive authentication information. Recommendations At the moment, there is no informati...
Ivanti Neurons Patch for Intune: Permissions licensing and access control issues
The Ivanti Neurons Patch for Intune has vulnerabilities related to permissions and access control. These vulnerabilities stem from exposed dangerous endpoints, which may allow remote, authenticated attackers to disclose sensitive authentication information...
Ivanti Neurons ITSM CVE-2026-12645 Detect
Detects Ivanti Neurons for ITSM formerly HEAT Service Management instances likely affected by CVE-2026-12645/12646/12647 missing authorization RCE and CVE-2026-12650 deserialization RCE. Fingerprints Login.aspx / AutomationService.svc surfaces and flags releases before 2026.2 when version metadat...
Ivanti Neurons for ITSM deserialization vulnerability (CNVD-2026-37870)
Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a deserialization vulnerability. This vulnerability arises from improper validation of deserialized data that is not trusted. Attackers can exploit this vulnerabili...
Ivanti Neurons for ITSM deserialization vulnerability (CNVD-2026-37873)
Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a deserialization vulnerability. This vulnerability arises from improper handling of deserialized data that is considered unreliable. Attackers can exploit this...
Ivanti Neurons for ITSM deserialization vulnerability
Ivanti Neurons for ITSM is a suite of enterprise-level IT service management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a deserialization vulnerability, which stems from improper handling of deserialized data that is not trusted. Attackers can exploit this...
Ivanti Neurons for ITSM has a missing authorization vulnerability (CNVD-2026-37876)
Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a missing authorization vulnerability; this vulnerability stems from improper handling of access permission verification. Attackers can exploit this vulnerability t...
Ivanti Neurons for ITSM has a missing authorization vulnerability (CNVD-2026-37875)
Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a missing authorization vulnerability. This vulnerability stems from defects in authorization verification, resulting in incorrect user permission validation...
Ivanti Neurons for ITSM deserialization vulnerability (CNVD-2026-37871)
Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a deserialization vulnerability. This vulnerability arises from improper handling of deserialized data that is not trusted. Attackers can exploit this vulnerability...
Ivanti Neurons for ITSM has a missing authorization vulnerability
Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a missing authorization vulnerability; this vulnerability arises from incorrect user authorization verification. Attackers can exploit this vulnerability to execute...
Ivanti Neurons for ITSM deserialization vulnerability (CNVD-2026-37872)
Ivanti Neurons for ITSM is a modern IT Service Management ITSM software developed by Ivanti Corporation. Ivanti Neurons for ITSM has a deserialization vulnerability, which stems from improper handling of deserialized data from untrusted sources. Attackers can exploit this vulnerability to execute...
Vulnerabilities in Ivanti Neurons for ITSM
Ivanti has addressed several vulnerabilities in Ivanti Neurons for ITSM. A malicious individual could exploit these vulnerabilities to perform unauthorized actions, including executing arbitrary code on the server. Ivanti released an update in version 2026.2 to fix these vulnerabilities. See the...