{"id":"CVE-2026-109412","published":"2026-10-13T17:17:28.267","lastModified":"2026-10-14T19:17:09.720","description":"An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-749"],"vendors":[],"products":[],"references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-Patch-for-Intune-October-2026","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A dangerous endpoint in Ivanti Neurons Patch for Intune allows remote authenticated attackers to leak sensitive authentication information, potentially leading to credential compromise and unauthorized access to managed devices.","exploitability":"Exploitation requires an authenticated attacker with valid credentials, making it moderately difficult but still highly impactful, as the attacker can leverage their existing access to extract additional authentication data.","blast_radius":"If exploited, this vulnerability could allow attackers to gain access to sensitive authentication tokens and credentials for managed devices, potentially enabling full control over Intune-managed environments and widespread device compromise.","remediation":"Disable the vulnerable endpoint immediately or restrict access to it via network segmentation until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["credential-exfiltration","remote-access","intune"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:45:38.445Z"}}