Multiple Vulnerabilities in Ivanti Products Could Allow for Arbitrary Code Execution

Multiple critical vulnerabilities were disclosed in Ivanti products (Neurons for ITSM, Endpoint Manager Mobile, and Sentry) including unauthenticated and authenticated deserialization flaws, missing authorization, and an authentication bypass that can lead to arbitrary code execution or administrative access. Several CVEs are listed; Ivanti reports cloud instances have been patched and urges on‑premises deployments to apply the remedial versions to mitigate potential installation of programs, data access/modification, or privilege escalation.