Ivanti Endpoint Manager and CSA have new vulnerabilities
Original title: Ivanti security advisory (AV26-1141)
Canada's Cyber Centre points to Ivanti advisories, including CVE-2026-121683 in CSA 5.0.8, and says to apply updates when available.
On November 10, 2026, the Canadian Centre for Cyber Security issued AV26-1141 stating that Ivanti Endpoint Manager and Cloud Services Application are affected by vulnerabilities. Named ranges are Endpoint Manager prior or equal to version 2024 SU7 and CSA version 5.0.8. The alert links an Ivanti CSA advisory for CVE-2026-121683 and a November 2026 Endpoint Manager advisory. It tells users and administrators to review those links and apply necessary updates as they become available.
Unconfirmed: The alert does not state severity, impact, exploitation, or fixed versions.
- Serial number AV26-1141 is dated November 10, 2026.
- Endpoint Manager at or before 2024 SU7 is listed as affected.
- CSA version 5.0.8 is tied to CVE-2026-121683.
- No fixed build is named in the Cyber Centre alert.
Impact: Unspecified vulnerabilities in Ivanti management products
| Product | Affected |
|---|---|
| Ivanti Endpoint Manager | Prior or equal to version 2024 SU7 |
| Ivanti Cloud Services Application | Version 5.0.8 |
- 1.Review the linked Ivanti advisories and apply updates as they become available.
- CVEs
- CVE-2026-121683
- Vendors
- Ivanti
- Organizations
- Canadian Centre for Cyber Security
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-121683 | Missing authentication in Ivanti Cloud Services Application 5.0.8 | 9.4 | — |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1141 Date: November 10, 2026 As of November 10, 2026, Ivanti is affected by vulnerabilities in the following products: Endpoint Manager Prior or equal to version 2024 SU7 Cloud Services Application (CSA) Version 5. 0. 8 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.