CVE-2026-121683

Ivanti Cloud Services Application

Medium priority: severe, but no known exploitation

Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.

In the news

• Múltiples vulnerabilidades en productos de Ivanti · INCIBE-CERT