CISA Adds High-Severity Ivanti Vulnerability to KEV Catalog

A critical SQL injection vulnerability (CVE-2024-29824) in Ivanti Endpoint Manager (core server) allows unauthenticated attackers on the network to achieve arbitrary code execution; it has a CVSS score of 9.6 and Ivanti reported a limited number of customers were exploited in the wild. Ivanti released security updates and guidance for patching, and the advisory urges organizations to prioritize immediate patching and thorough security assessments to mitigate potential compromise.