Ivanti Keeps Security Teams Scrambling With 2 More Vulns

Ivanti disclosed two critical vulnerabilities—a remote code execution bug in Standalone Sentry (CVE-2023-41724, CVSS 9.6) and an authenticated remote file-write/RCE in Neurons for ITSM (CVE-2023-46808, CVSS 9.9)—and published fixes; the vendor reported no evidence of active exploitation for these two issues. The report highlights a broader pattern of frequent, severe Ivanti vulnerabilities and prior rapid exploitation by actors such as Magnet Goblin and UNC5221, underscoring elevated risk for affected customers until patches are applied.