Medium severity6.7NVD Advisory· Published Nov 10, 2026· Updated Nov 10, 2026
CVE-2026-105426
CVE-2026-105426
Description
Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- Ivanti Patches New Security Flaws Affecting Endpoint Manager, EPMM, Sentry, CSA, and Workspace ManagerCyber Security News · Nov 10, 2026