@undercode.bsky.social on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

Undercode Testing

undercode.bsky.social

did:plc:owo2l6v35uvk3axlrkz6d2wt

Ivanti Neurons for ITSM 权限提升漏洞 (CVE-2026-9614): 从低权限用户到 IT 服务台全权控制的“特快通道” Introduction: 广泛的权限检查缺失（CWE-284）使全局广泛部署的 Ivanti Neurons for ITSM 平台陷入了严重的身份验证和授权失效困境。这一被追踪为 CVE-2026-9614 的高危漏洞，允许任何一个已经持有该平台有效普通账号的远程攻击者，绕过所有应有的权限确认环节，一步登顶获取完整的系统管理权限。其 CVSS v3.1 基准分高达 8.8… http://undercodetesting.com/ivanti-neurons-for-itsm-%e6%9d%83%e9%99%90%e6%8f%90%e5%8d%87%e6%bc%8f%e6%b4%9e-cve-2026-9614-%e4%bb%8e%e4%bd%8e%e6%9d%83%e9%99%90%e7%94%a8%e6%88%b7%e5%88%b0-it-%e6%9c%8d%e5%8a%a1%e5%8f%b0%e5%85%a8/?utm_source=bluesky&utm_medium=jetpack_social

2026-06-03T21:03:52.770Z