CVE-2026-109412

CVE Enrichment

CVSS: 9.9 CRITICAL
CISA KEV: Not listed

Description

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
Published: 14-Oct-2026 00:17
Last Modified: 14-Oct-2026 00:17
CWE: CWE-749

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:C /
                            C:H /
                            I:H /
                            A:H

References

3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Last enrichment sync: 14-Oct-2026 03:12
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (3)

In Neurons Patch for Intune, Ivanti resolved CVE-2026-109412, a critical flaw that could allow attackers to leak sensitive authentication information. Citrix, Fortinet and Ivanti Patch 29 Vulnerabilities, Including an Exploited Zero-Day
Each has a flaw Ivanti rates 9.9 out of 10: CVE-2026-106042 in Xtraction before version 2026.4, and CVE-2026-109412 in Neurons Patch for Intune. Ivanti Connect Secure Zero-Day Chain Enables Unauthenticated Root Access; Third Fix Pending
CVE-2026-109412 is a CVSS 9.9 vulnerability affecting Ivanti Neurons Patch for Intune, a cloud service used to manage third-party application updates through Microsoft Intune. Ivanti Patches Actively Exploited Connect Secure Zero-Day and Critical Credential Flaws

CVE (8)

Threat Actors (1)

MITRE ATT&CK (2)

Vendors (3)

Products (18)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.