Critical severity9.4NVD Advisory· Published Nov 10, 2026

CVE-2026-121683

Description

Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.

Affected products

Ivanti/Cloud Services Applicationllm-fuzzy
Range: =5.0.8

Patches

Vulnerability mechanics

References

hub.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-CVE-2026-121683nvd

News mentions

Ivanti Patches New Security Flaws Affecting Endpoint Manager, EPMM, Sentry, CSA, and Workspace Manager
Cyber Security News · Nov 10, 2026

cvss	0.611
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000