CVE-2026-107405 is a vulnerability in Ivanti Endpoint Manager Mobile
Published on November 10, 2026
An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to trigger a denial of service.
Vulnerability Analysis
CVE-2026-107405 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Exposed Dangerous Method or Function
The software provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.
Products Associated with CVE-2026-107405
Want to know whenever a new CVE is published for Ivanti Endpoint Manager Mobile? stack.watch will email you.
Affected Versions
Ivanti Endpoint Manager Mobile:- Version 12.11.0.0 is unaffected.
- Version 12.10.0.1 is unaffected.
- Version 12.9.0.3 is unaffected.