Remote Authentication Information Leak in Ivanti Neurons Patch for Intune

CVE-2026-109412

What is CVE-2026-109412?

An exposed endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to access sensitive authentication information, posing a significant risk to the integrity of user data and system security. This vulnerability highlights the potential for exploitation through improperly secured endpoints, necessitating immediate attention and remediation to protect against unauthorized information access.

References