CVE-2026-107404: Medium severity vulnerability

Published Nov 10, 2026

Updated

Argument injection in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to delete arbitrary files on disk.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Ivanti EPMM to a version that resolves this vulnerability.
Fixed in 12.10.0.1
Upgrade
Upgrade Ivanti EPMM to a version that resolves this vulnerability.
Fixed in 12.9.0.3
Upgrade
Upgrade Ivanti EPMM to a version that resolves this vulnerability.
Fixed in 12.8.0.5

Event History

Nov 10, 2026

CVE Published

via MITRE·03:59 PM

Data Sourced

via MITRE·03:59 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A remote attacker must be authenticated to Ivanti EPMM and already have administrator privileges. The issue is therefore primarily relevant where administrative accounts may be compromised, shared, or accessible to untrusted users.

What is the impact of successful exploitation?

An attacker can use argument injection to delete arbitrary files on the affected system. The provided information indicates availability impact, but does not indicate confidentiality or integrity impact.

Which versions need remediation?

Ivanti EPMM versions before 12.10.0.1, 12.9.0.3, and 12.8.0.5 are affected. Updating to the applicable listed version or later addresses the affected version ranges.

CVE-2026-107404: Medium severity vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which versions need remediation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Which versions need remediation?