轉發 台灣電腦網路危機處理暨協調中心 資安訊息警訊 TWCERTCC-200-202610-00000014

[內容說明]
Ivanti 針對 Ivanti Neurons Patch for Intune 發布重大資安漏洞公告(CVE-2026-109412，CVSS：9.9)，此漏洞允許經身分驗證的遠端攻擊者可洩漏敏感身分驗證資訊。

[影響平台]
Ivanti Neurons Patch for Intune

[建議措施]
根據官方網站釋出的解決方式進行修補

[參考資料]
1. https://www.twcert.org.tw/tw/cp-169-11278-c1911-1.html
Forwarded Taiwan Computer Network Crisis Coordination Center Cybersecurity Information Alert TWCERTCC-200-202610-00000014

[Description]
Ivanti has released a critical security vulnerability advisory for Ivanti Neurons Patch for Intune (CVE-2026-109412, CVSS: 9.9). This vulnerability allows authenticated remote attackers to disclose sensitive authentication information.

[Affected Platforms]
Ivanti Neurons Patch for Intune

[Recommended Measures]
Apply patches according to the remediation methods released on the official website.

[References]
1. https://www.twcert.org.tw/tw/cp-169-11278-c1911-1.html