← Database

CVE-2026-121683

CRITICAL CVSS: 9.4 Published: 2026-11-10 Modified: 2026-11-10

Description

Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.

Affected Platforms

Unknown

Weakness Type

CWE-306

References