Security Advisory

Ivanti Product Security Update Advisory

  • Nov 12 2026
Ivanti Product Security Update Advisory

A security update addressing a vulnerability in Ivanti products has been released.

  • The affected products and vulnerabilities are as follows. – CVE-2026-105425: Ivanti Sentry version 10.7.3 or earlier, Ivanti Sentry version 10.8.2 or earlier, Ivanti Endpoint Manager Mobile (EPMM) version 12.9.0.2 or earlier, Ivanti Endpoint Manager Mobile (EPMM) version 12.10.0.0 or earlier.
    • CVE-2026-121653: Ivanti Endpoint Manager (EPM) version 2024 SU7 or earlier. – CVE-2026-121683: Ivanti Cloud Services Application (CSA) version 5.0.8.
  • The vulnerabilities resolved are as follows: – An operating system command injection vulnerability (CVE-2026-105425) in Ivanti Sentry and Ivanti EPMM.
    • An SQL injection vulnerability (CVE-2026-121653) in Ivanti Endpoint Manager (EPM). – A lack of authentication for critical features vulnerability (CVE-2026-121683) in Ivanti CSA.
  • The latest update provides a Vulnerability Patch for this vulnerability. – CVE-2026-105425: Ivanti Sentry 10.7.4, 10.8.3, 11.0.0; Ivanti Endpoint Manager Mobile (EPMM) 12.9.0.3, 12.10.0.1, 12.11.0.0.
    • CVE-2026-121653: Ivanti Endpoint Manager (EPM) 2024 SU8. – CVE-2026-121683: Ivanti Cloud Services Application (CSA) 5.0.8.1.
  • Users of this product should update to the latest version with the Vulnerability Patch, following the instructions on the reference website.

Tags:
Previous Post

Next Post