Ivanti patches critical EPM SQLi-to-RCE and CSA auth flaw
Ivanti's November 2026 update fixes 13 flaws, led by CVE-2026-121653 (CVSS 9.8), unauthenticated SQLi-to-RCE in Endpoint Manager, and CVE-2026-121683 (9.4) in Cloud Services Application.
Ivanti's November 2026 update fixes 13 flaws, led by CVE-2026-121653 (CVSS 9.8), unauthenticated SQLi-to-RCE in Endpoint Manager, and CVE-2026-121683 (9.4) in Cloud Services Application.