CVE-2026-109412 PUBLISHED

Assigner: ivanti
Reserved: 12.10.2026 Published: 13.10.2026 Updated: 14.10.2026

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 9.9

Product Status

Vendor Ivanti
Product Neurons Patch for Intune
Versions Default: affected
  • Version Fix Date: September 16, 2026 is unaffected

References

Problem Types

  • CWE-749 Exposed dangerous method or function CWE

Impacts

  • CAPEC-37 Retrieve Embedded Sensitive Data