Summary
| Parameter | Value |
|---|---|
| CVE ID | CVE-2026-121683 |
| Alert Source | GitHub Advisory - Critical Vulnerability |
| CVE Publication Year | 2026 |
| Date Published | 2026-11-10 |
| Vendor | Ivanti |
| Product | Cloud Services Application |
| Vulnerability Type | missing authentication for critical function (CWE-306) |
| CVSS Score | 9.4 (critical) |
| EPSS Score | No data |
| CISA KEV | No |
| Ransomware | Not confirmed |
Vulnerability Description
Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.
Ivanti CSA is the gateway through which endpoints managed by Ivanti Endpoint Manager reach the Core server from outside the corporate network. Tampering with trusted certificates may let an attacker impersonate the Core server or cut managed devices off from management.
Required Actions
- Update Ivanti CSA as per the vendor advisory (linked in Sources).
- Review the trusted EPM Core certificate list in CSA and remove any entries you do not recognize.
- Restrict access to the CSA management interface to trusted addresses.
Who Is Affected?
The vulnerability affects Ivanti Cloud Services Application version 5.0.8 — in practice, organizations using Ivanti Endpoint Manager to manage remote workers’ devices.
Sources
Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.
Frequently asked questions
What is the CVE-2026-121683 vulnerability?
CVE-2026-121683 is a missing authentication flaw (CWE-306) in Ivanti Cloud Services Application 5.0.8 that allows adding and deleting trusted EPM Core certificates. CVSS score: 9.4.
Does exploiting CVE-2026-121683 require authentication?
No. The attack is carried out remotely and requires no authentication.
How to protect against CVE-2026-121683?
Update Ivanti CSA as per the vendor advisory, verify the trusted certificate list and restrict access to the admin panel.
Who is affected by CVE-2026-121683?
Organizations running Ivanti Cloud Services Application 5.0.8 together with Ivanti Endpoint Manager.
