{"id":"EUVD-2026-121155","enisaUuid":"4dcab927-8c3f-3845-aa23-1cf2427d5c08","description":"Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.","datePublished":"Nov 10, 2026, 3:33:51 PM","dateUpdated":"Nov 10, 2026, 3:33:51 PM","baseScore":9.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","references":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-CVE-2026-121683?language\u003den_US\n","aliases":"CVE-2026-121683\nGHSA-ph39-73fr-h9vm\n","assigner":"ivanti","epss":0.59,"enisaIdProduct":[{"id":"aa485662-3881-3491-8e35-981cb8f1e631","product":{"name":"Cloud Services Application","vendor":{"name":"Ivanti"}},"product_version":"patch: 5.0.8"}],"enisaIdVendor":[{"id":"afad909f-e6d8-3c80-9b6e-dacf3f5aceb4","vendor":{"name":"Ivanti"}}],"enisaIdVulnerability":[{"id":"227fdbfd-7c2e-3715-be2a-c0d567ef3c0c","vulnerability":{"id":"GHSA-ph39-73fr-h9vm","description":"Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.","datePublished":"Nov 10, 2026, 6:31:39 PM","dateUpdated":"Nov 10, 2026, 6:31:39 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-121683\nhttps://hub.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-CVE-2026-121683?language\u003den_US\n","enisa_id":"EUVD-2026-121155\n","aliases":"CVE-2026-121683\nGHSA-ph39-73fr-h9vm\n","epss":0.0,"dataProcessed":"Nov 12, 2026, 10:01:47 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"ee45efff-0152-343b-85fa-bf9204e15f08","vulnerability":{"id":"CVE-2026-121683","description":"Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.","datePublished":"Nov 10, 2026, 3:33:51 PM","dateUpdated":"Nov 10, 2026, 3:33:51 PM","status":"PUBLISHED","baseScore":9.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H","references":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-CVE-2026-121683?language\u003den_US\n","enisa_id":"EUVD-2026-121155\n","assigner":"ivanti","epss":0.59,"dataProcessed":"Nov 12, 2026, 10:01:13 PM","vulnerabilityProduct":[{"id":"095359c7-e71e-3462-ab3b-4f32000c95cc","product":{"name":"Cloud Services Application","vendor":{"name":"Ivanti"}},"product_version":"patch: 5.0.8"}],"vulnerabilityVendor":[{"id":"2d788cc9-fc3e-3fef-bef5-45c2d1fe0cec","vendor":{"name":"Ivanti"}}]}}],"enisaIdAdvisory":[]}