# CVE-2026-107405: Ivanti EPMM exposed dangerous function denial of service

Source: https://junglewise.ai/threats/cve-2026-107405-an-exposed-dangerous-function-in-ivanti-epmm-before-version-12  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-107405 · Severity: medium · CVSS 5.5 · Published 2026-11-10

Ivanti EPMM is an enterprise mobile device management platform used to secure and manage corporate devices. A dangerous function in the software can be triggered by local authenticated users to cause a denial of service, making the platform unavailable until restarted.

Technologies: [Ivanti EPMM](https://junglewise.ai/threats/technologies/epmm). Vendors: [Ivanti](https://junglewise.ai/threats/vendors/ivanti).

## Quick answers

**Is CVE-2026-107405 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-107405 being exploited in the wild.

**How severe is CVE-2026-107405?** Medium severity, with a CVSS score of 5.5, published 10 November 2026.

**Which products and versions are affected?** Ivanti EPMM before 12.10.0.1, 12.9.0.3, and 12.8.0.5.

**Is there a fix for CVE-2026-107405?** Yes: fixed in EPMM 12.10.0.1, 12.9.0.3, 12.8.0.5. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-107405 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-107405?** Check whether you run Ivanti EPMM at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in EPMM 12.10.0.1, 12.9.0.3, 12.8.0.5

## Technical details

An exposed dangerous function in Ivanti EPMM allows local authenticated attackers to trigger a denial of service condition. The vulnerability requires local access and prior authentication to the system. A successful exploit results in service disruption without gaining unauthorized access to data or escalating privileges.

## Affected products

- Ivanti EPMM before 12.10.0.1, 12.9.0.3, and 12.8.0.5

## Timeline

- 2026-11-10: disclosed

## References

- [https://hub.ivanti.com/s/article/November-2026-Security-Advisory-Ivanti-EPMM-Multiple-CVEs](https://hub.ivanti.com/s/article/November-2026-Security-Advisory-Ivanti-EPMM-Multiple-CVEs)

## Related threats

- [Ivanti EPMM PII exposure vulnerability](https://junglewise.ai/threats/cve-2026-83528-exposure-of-pii-in-ivanti-epmm-before-version-12-10-0-1-12-9-0-3)
- [Ivanti EPMM argument injection in file deletion](https://junglewise.ai/threats/cve-2026-107404-argument-injection-in-ivanti-epmm-before-version-12-10-0-1-12-9)
- [Ivanti EPMM improper input validation denial of service](https://junglewise.ai/threats/cve-2026-105427-improper-input-validation-in-ivanti-epmm-before-version-12-10-0)
- [Ivanti EPMM improper input validation kernel parameter modification](https://junglewise.ai/threats/cve-2026-105426-improper-input-validation-in-ivanti-epmm-before-version-12-10-0)
- [Ivanti Sentry and EPMM OS command injection](https://junglewise.ai/threats/cve-2026-105425-os-command-injection-in-ivanti-sentry-before-versions-10-7-4-10)