CVE-2026-109412: Critical severity Ivanti Neurons Patch for Intune vulnerability
Published Oct 13, 2026
·Updated
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.
Affected Software
1 affected component
Ivanti Neurons Patch for Intune
Event History
Oct 13, 2026
CVE Published
via MITRE·04:23 PM
Data Sourced
via MITRE·04:23 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Deployments of Ivanti Neurons Patch for Intune with the dangerous endpoint exposed are affected. Exploitation is remote and does not require user interaction.
2
What does an attacker need to exploit it?
The attacker needs authenticated access with low privileges. The attack complexity is low, and the reported impact includes disclosure of sensitive authentication information.
3
Is an unauthenticated attacker able to exploit this vulnerability?
No. The vulnerability is rated with privileges required at the low level, indicating that authentication is required.