Skip to content
Ivanti Issues Critical Patches for SQL Injection and Other Vulnerabilities

Ivanti Issues Critical Patches for SQL Injection and Other Vulnerabilities

First seen 11 Nov 2026, 17:03 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 11, 2026 at 17:09 UTC

Ivanti has released security updates addressing critical vulnerabilities in its Endpoint Manager (EPM), Endpoint Manager Mobile (EPMM), Cloud Services Application (CSA), and other products. The most severe flaw, CVE-2026-121653, is a SQL injection vulnerability with a CVSS score of 9.8, allowing unauthenticated remote code execution. Another critical issue, CVE-2026-121683, affects CSA, enabling remote attackers to manipulate trusted certificate entries. The vulnerabilities were disclosed responsibly, with no known exploitation prior to the patches. Organizations are urged to update to the latest versions to mitigate risks, particularly for unauthenticated access vulnerabilities. The updates address a total of 13 vulnerabilities across multiple products, including high and medium severity issues. The patches are available through Ivanti's licensing system.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 10h ago How this analysis works

Timeline

2026-11-10
CVE disclosures and patches released
Ivanti disclosed multiple vulnerabilities including CVE-2026-121653 and CVE-2026-121683, releasing patches for affected products.
Hub.Ivanti
2026-11-10
CVE-2026-121653 published
CVE-2026-121653, a critical SQL injection vulnerability, was published with a CVSS score of 9.8.
Gbhackers
2026-11-10
CVE-2026-121683 published
CVE-2026-121683, a critical vulnerability in CSA, was published with a CVSS score of 9.4.
Securityweek

More articles in this cluster (14)

Following this threat?

Track Citrix and CVE-2026-102705 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (29)

1 / 3

Common questions

Which Ivanti products are affected?
Affected products include Endpoint Manager, Endpoint Manager Mobile, Cloud Services Application, and User Workspace Manager.
What is the severity of the vulnerabilities?
The vulnerabilities range from medium to critical, with CVE-2026-121653 rated as critical with a CVSS score of 9.8.
How can I apply the patches?
Patches can be obtained through Ivanti's licensing system for the respective products.