CVE-2024-21893: New Ivanti Zero-Day Vulnerability Actively Exploited

Arctic Wolf summarizes Ivanti's Jan 31, 2024 disclosure of two high-severity vulnerabilities—CVE-2024-21893 (SSRF) and CVE-2024-21888 (privilege escalation)—affecting Ivanti Connect Secure, Policy Secure, and Neurons; no PoC exploits have been observed for these CVEs at the time of writing, but prior Ivanti zero-days were targeted by suspected Chinese-nexus actors, so Arctic Wolf recommends applying the available patches or importing the mitigation XML and running integrity checks.