Posting Date: 2026/10/15

【Vulnerability Alert】Ivanti Neurons for Intune has a critical security vulnerability (CVE-2026-109412)

  • Subject: 【Vulnerability Alert】Ivanti Neurons for Intune has a critical security vulnerability (CVE-2026-109412)


  • Description:
    • Forwarding TWCERTCC Security Information Advisory TWCERTCC-200-202610-00000014
    • Ivanti has released a critical security vulnerability advisory for Ivanti Neurons Patch for Intune (CVE-2026-109412, CVSS: 9.9). This vulnerability allows an authenticated remote attacker to leak sensitive authentication information.
  • Affected Platforms:
    • Ivanti Neurons Patch for Intune
  • Recommended Actions:
    • Patch according to the solution released on the official website
  • References:
    1. https://www.twcert.org.tw/tw/cp-169-11278-c1911-1.html

Computer and Communication Center
Network System Division