Multiple Vulnerabilities in Ivanti Products Could Allow for Remote Code Execution

Multiple critical and high-severity vulnerabilities were disclosed in Ivanti products (notably EPM, Workspace Control, and Cloud Services Appliance), including unauthenticated remote code execution through SQL injection and insecure deserialization, OS command injection, XXE, authentication bypasses, DLL hijacking, privilege escalation, and other flaws across several CVEs. Successful exploitation could allow attackers to execute arbitrary code, escalate privileges, access or exfiltrate credentials and data, or isolate managed devices; affected organizations should prioritize vendor patches and mitigations.