CVE-2026-109412PATCHED

ivanti · neurons patch for intune

CVE-2026-109412: An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitiv

Description

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.

Affected Products

Vendor	Product	Versions
ivanti	neurons patch for intune	—

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-Patch-for-Intune-October-2026

Related News (3 articles)

Tier B

CCCS Canada2h ago

Ivanti security advisory (AV26-1035)

→ No new info (linked only)

Tier D

The Hacker News4h ago

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

→ No new info (linked only)

Tier C

VulDB4h ago

CVE-2026-109412 | Ivanti Neurons Patch for Intune information disclosure

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.9 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

Fix Date: September 162026

CWECWE-749

PublishedOct 13, 2026

Last enriched4h ago

Trending Score45

Source articles3

Independent3

Info Completeness5/14

Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-104935

CVE-2026-104935: Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb

Trending: 86

CRITICALCVE-2026-106042

CVE-2026-106042: An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authent

Trending: 41

HIGHCVE-2026-106043

CVE-2026-106043: A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote u

Trending: 37

HIGHCVE-2026-106047

CVE-2026-106047: A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a r

Trending: 27

MEDIUMCVE-2026-106035

CVE-2026-106035: An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a re

Trending: 23

Pin to Dashboard

Verification

State: verified

Confidence: 100%

Vulnerability Timeline

CVE Published

Oct 13, 2026

Discovered by ZDM

Oct 13, 2026

Patch Available

Oct 13, 2026