CVE-2026-121683 | BDVDB-2026-402974 Detail
IvantiCloud Services Application
Description#
Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.
Impact#
CAPEC-115 – Authentication Bypass
Weaknesses#
- CWE-306 Missing Authentication for Critical Function
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.