CVE-2026-109412: Ivanti Neurons Patch Authentication Data Leak

CVE-2026-109412 describes an exposed endpoint in Ivanti Neurons Patch for Intune that allows a remote authenticated attacker to leak sensitive authentication information. The vulnerability affects organizations relying on Ivanti's patch management solution for Intune, directly compromising authentication credentials essential to infrastructure security.

The vulnerability carries a CVSS score of 9.9, classified as critical. It was published on the NVD on October 13, 2026. Recent signals from security discussion platforms indicate growing awareness within the security community, with CVE-2026-109412 mentioned alongside other related vulnerabilities as potential attack vectors.

IT teams and CISOs must immediately verify versions of Ivanti Neurons Patch deployed in Intune environments and consult official Ivanti security advisories for available patches. Implement access controls on the exposed endpoint, monitor authentication logs for anomalies, and apply patches immediately upon availability. Restrict non-essential remote access for privileged accounts until remediation.

Authentication data is a critical security perimeter component. Organizations running Ivanti Neurons Patch for Intune in sensitive environments (finance, healthcare, government) should prioritize security review and assess potential unauthorized access. Continuous monitoring of authentication configuration data is essential during the remediation window.