CVE-2026-121683

Published 10 November 2026 · tracked since 11 November 2026

Description

Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-125754 HIGH 7.1
• CVE-2026-125753 MEDIUM 5.9
• CVE-2026-125747 MEDIUM 5.4
• CVE-2026-124038 LOW 2.3
• CVE-2026-123181 MEDIUM 5.5
• CVE-2026-123179 MEDIUM 5.5
• CVE-2026-121653 CRITICAL 9.8
• CVE-2026-111256
• CVE-2026-111250
• CVE-2026-111249

→ Open the live CVE board · all tools