CVE-2025-5353: Ivanti Workspace Control

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials.

Affected products

• Ivanti Workspace Control: before 10.19.10.0 (fixed in 10.19.10.0)

Published 2025-06-10. Last modified 2026-06-17.