← Database

CVE-2026-4913

MEDIUM CVSS: 5.7 Published: 2026-04-14 Modified: 2026-06-17

Description

Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.

Affected Platforms

Unknown

Weakness Type

CWE-424

References