WARNING: IVANTI RELEASES SECURITY UPDATE TO ADRESS VULNERABILITIES IN IVANTI CONNECT SECURE, IVANTI POLICY SECURE GATEWAYS!

Ivanti and national cybersecurity partners have published an advisory for multiple severe vulnerabilities in Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA — including an actively exploited authentication bypass (CVE-2023-46805) and a command-injection vulnerability (CVE-2024-21887) that, together with additional flaws (CVE-2024-21888, CVE-2024-21893, CVE-2024-22024), can allow unauthenticated access, remote command execution, privilege escalation, and SSRF/XXE; administrators are urged to apply vendor patches or mitigations immediately and increase detection and incident reporting capabilities.