Citrix, Ivanti: vulnerabilities

Ivanti Sentry

Citrix and Ivanti patched critical and high-severity vulnerabilities

Do this now

Upgrade Ivanti Sentry to 11.0.0, 10.8.3 or 10.7.4, plus the +5 more lines in Fix it.

Who should check: teams running VPN & firewalls

Fix it

Sentry

On 10.7.xUpgrade to Sentry 10.7.4
On 10.8.xUpgrade to Sentry 10.8.3
On 11.0.xUpgrade to Sentry 11.0.0

Endpoint Manager Mobile

On 12.9.xUpgrade to Endpoint Manager Mobile 12.9.0.3
On 12.10.xUpgrade to Endpoint Manager Mobile 12.10.0.1
On 12.11.xUpgrade to Endpoint Manager Mobile 12.11.0.0

Endpoint Manager

Upgrade to Endpoint Manager 2024 SU8

Cloud Services Application

Upgrade to Cloud Services Application 5.0.8

First seen: 11 Nov 2026
Last update: 11 Nov 2026, 14:18 UTC
Fixed in: Sentry 11.0.0
Sentry 10.8.3
Sentry 10.7.4
Endpoint Manager Mobile 12.11.0.0
Endpoint Manager Mobile 12.10.0.1
Endpoint Manager Mobile 12.9.0.3
Endpoint Manager 2024 SU8
Cloud Services Application 5.0.8
Identifiers: CVE-2026-102705 ID not published yet
CVE-2026-105425
CVE-2026-121653
CVE-2026-121683
CVSS: 9.8
Source: news
On the menu as: VPN & firewalls

Check this repository for exposure to one security incident from pwned.coffee. Report first, change nothing until I say so.

## Citrix, Ivanti: vulnerabilities
Severity: critical. Patch status: patched.
Affected: Ivanti Sentry
Fixed in: Sentry 11.0.0, Sentry 10.8.3, Sentry 10.7.4, Endpoint Manager Mobile 12.11.0.0, Endpoint Manager Mobile 12.10.0.1, Endpoint Manager Mobile 12.9.0.3, Endpoint Manager 2024 SU8, Cloud Services Application 5.0.8
Ids: CVE-2026-102705, CVE-2026-105425, CVE-2026-121653, CVE-2026-121683

Citrix and Ivanti patched critical and high-severity vulnerabilities

## Steps
1. This touches infrastructure (vpn-edge). Look in terraform, ansible, cloud-init, Dockerfiles and docs for the product and version we run. If it isn't in the repo, say so and list what a human should check on the box.
2. Fix by release line: Sentry: 11.0.0; 10.8.3; 10.7.4. Endpoint Manager Mobile: 12.11.0.0; 12.10.0.1; 12.9.0.3. Endpoint Manager: 2024 SU8. Cloud Services Application: 5.0.8.

## Fix by release line
| Line | State | Fix | Until then |
|---|---|---|---|
| Sentry | fixed | 11.0.0 | — |
| Sentry | fixed | 10.8.3 | — |
| Sentry | fixed | 10.7.4 | — |
| Endpoint Manager Mobile | fixed | 12.11.0.0 | — |
| Endpoint Manager Mobile | fixed | 12.10.0.1 | — |
| Endpoint Manager Mobile | fixed | 12.9.0.3 | — |
| Endpoint Manager | fixed | 2024 SU8 | — |
| Cloud Services Application | fixed | 5.0.8 | — |

## Report
A table: file, product or package, version in use, affected yes/no, exact fix. Then anything a human has to check outside the repo.

If you have the pwned.coffee MCP server (https://pwned.coffee/mcp), call lookup_cve("CVE-2026-102705") for the latest, and check_repo with this repo's lockfiles, Dockerfiles and workflows for a full receipt.
Sources: https://www.securityweek.com/citrix-ivanti-patch-critical-and-high-severity-vulnerabilities/
https://pwned.coffee/i/citrix-ivanti-vulnerabilities

Receipt

Exploitation: No known exploitation
Fix by release line: Product Affected Fixed in Source
Sentry before 11.0.0 11.0.0 CVE record (CNA) checked 13 Nov
Sentry before 10.8.3 10.8.3 CVE record (CNA) checked 13 Nov
Sentry before 10.7.4 10.7.4 CVE record (CNA) checked 13 Nov
Endpoint Manager Mobile before 12.11.0.0 12.11.0.0 CVE record (CNA) checked 13 Nov
Endpoint Manager Mobile before 12.10.0.1 12.10.0.1 CVE record (CNA) checked 13 Nov
Endpoint Manager Mobile before 12.9.0.3 12.9.0.3 CVE record (CNA) checked 13 Nov
Endpoint Manager before 2024 SU8 2024 SU8 CVE record (CNA) checked 13 Nov
Cloud Services Application before 5.0.8 5.0.8 CVE record (CNA) checked 13 Nov
Score: CVSS 9.8 (critical). CVSS 3.1 9.8 (CNA ivanti) for CVE-2026-121653
Last checked: 13 Nov 2026, 16:26 UTC

Product	Affected	Fixed in	Source
Sentry	before 11.0.0	11.0.0	CVE record (CNA) checked 13 Nov
Sentry	before 10.8.3	10.8.3	CVE record (CNA) checked 13 Nov
Sentry	before 10.7.4	10.7.4	CVE record (CNA) checked 13 Nov
Endpoint Manager Mobile	before 12.11.0.0	12.11.0.0	CVE record (CNA) checked 13 Nov
Endpoint Manager Mobile	before 12.10.0.1	12.10.0.1	CVE record (CNA) checked 13 Nov
Endpoint Manager Mobile	before 12.9.0.3	12.9.0.3	CVE record (CNA) checked 13 Nov
Endpoint Manager	before 2024 SU8	2024 SU8	CVE record (CNA) checked 13 Nov
Cloud Services Application	before 5.0.8	5.0.8	CVE record (CNA) checked 13 Nov

Sources: KEV – CVE record ✓ Vendor ✓

Sources

securityweek.com: Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities

Follow on X

Totalone very hot coffee