Improper Input Validation Vulnerability in Ivanti EPMM
CVE-2026-105427

4.9MEDIUM

Key Information:

Vendor

Ivanti
Status
Endpoint Manager Mobile
Vendor
CVE Published:
10 November 2026

What is CVE-2026-105427?

An improper input validation issue in Ivanti EPMM versions prior to 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with administrative privileges to disrupt all Apache HTTPS services. This unsanitized input can lead to a permanent denial of service, effectively disabling crucial web services and impacting system availability.

Affected Version(s)

Endpoint Manager Mobile 12.11.0.0

Endpoint Manager Mobile 12.11.0.0

Endpoint Manager Mobile 12.10.0.1

References

https://hub.ivanti.com/s/article/November-2026-Security-A...

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.