CVE-2024-11639: Ivanti Cloud Services Appliance

Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days.

An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access

Affected products

• Ivanti Cloud Services Appliance: before 5.0.3 (fixed in 5.0.3)

Published 2024-12-10. Last modified 2026-06-17.