CVE-2024-21893: New Ivanti Zero-Day Vulnerability Actively Exploited

Arctic Wolf reports two high-severity Ivanti vulnerabilities (CVE-2024-21893: a SAML-component SSRF; CVE-2024-21888: a web-component privilege escalation) and recommends applying vendor patches or importing the provided mitigation XML and running integrity checks; no PoC or in-the-wild exploitation was observed at the time, but prior zero-day activity against Ivanti and suspected Chinese-nexus targeting increase the likelihood of future exploitation.