Paper/Archive/CVE-2026-109412

CVE-2026-109412

Ivanti Neurons Patch for Intune — An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication…

EPSS 0.9%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 58.7.587 × 2011.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.

Affected

ProductAffectedFixed inSource

Neurons Patch for Intunesee advisoryFix Date: September 16, 2026CNA

Scores by source

ivanti (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refhub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-Patch-for-Intune-October-2026