Critical · 9.4 CVE-2026-121683 EUVD-2026-121155GHSA-ph39-73fr-h9vm

Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitr…

Published Nov 10, 2026 · Assigned by ivanti

Vendor: ivanti Product: Cloud Services Application Category: Network devices

Description

Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	Cloud Services Application	patch: 5.0.8	—

Advisories 1

WID-SEC-2026-4503 Ivanti Cloud Services Application: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Nov 10, 2026

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-CVE-2026-121683?language=en_US