Ce mail provient de l'extérieur, restons vigilants

=====================================================================


                            CERT-Renater

                Note d'Information No. 2026/VULN1023
_____________________________________________________________________

DATE                : 14/10/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Ivanti Neurons for UEM.

====================================================================
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-Patch-for-Intune-October-2026?language=en_US
_____________________________________________________________________

Security Advisory Ivanti Neurons Patch for Intune October 2026
(CVE-2026-109412)

Primary Product
Ivanti Neurons for UEM

Categories
Patch for Intune

Article Type
Security Advisory

Created Date
Oct 13, 2026 2:02:58 PM

Last Modified Date
Oct 13, 2026 2:02:58 PM

Ivanti has released updates for Ivanti Neurons Patch for Intune which
addresses one critical severity vulnerability. Successful exploitation
could allow a remote authenticated attacker to leak sensitive
authentication information. 

We are not aware of any customers being exploited by this vulnerability
at the time of disclosure. 

 

Vulnerability Details: 

CVE Number    Description    CVSS Score (Severity)    CVSS Vector    CWE 

CVE-2026-109412  
	
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows
a remote authenticated attacker to leak sensitive authentication
information. 
          9.9 (Critical)   CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 
CWE-749 

 

Affected Versions 

Product Name                        Patch Availability    
Ivanti Neurons Patch for Intune    Cloud services automatically updated as
                                           of September 16, 2026 
 

Solution 

The fix was applied to all environments on September 16, 2026.

 

Mitigation or Workaround 

Out of an abundance of caution, Ivanti recommends that customers rotate the
client secret associated with the Microsoft Entra ID App Registration used
for Intune publication. This vulnerability only impacts the secret for the
Patch for Intune Application Publisher Credential. It does not impact any
other configured Entra ID credentials.
 

FAQ 

    Are you aware of any active exploitation of this vulnerability? 

We are not aware of any customers being exploited by this vulnerability prior
to public disclosure. This vulnerability was disclosed through our responsible
disclosure program.   

 
    How can I tell if I have been compromised? 

Currently, there is no known public exploitation of this vulnerability that
could be used to provide a list of indicators of compromise. 

 
    What should I do if I need help?  

If you have questions after reviewing this information, you can log a case
and/or request a call via the Ivanti Innovators Hub. 


Article Number :
000109546

=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================