CVE-2026-109412Critical· 9.9▾ MidnightAn exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 54.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102734Medium· 5.5asteval is a Python expression evaluator designed for restricted execution
CVE-2025-68697High· 7.1n8n is an open source workflow automation platform
CVE-2026-89110Critical· 9.9SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality
CVE-2026-109556High· 8.0EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied input.path executable
CVE-2026-109422High· 8.1NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellEx…
CVE-2026-108897Medium· 5.3A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android