Ivanti warns of three more CSA zero-days exploited in attacks

Ivanti disclosed three new actively exploited zero-day vulnerabilities in its Cloud Services Appliance (CSA) that can be chained with a prior admin-bypass flaw to enable SQL injection, command injection (remote code execution), and path traversal; customers are urged to upgrade to CSA 5.0.2, rebuild any suspected compromised appliances, and monitor EDR alerts and admin account changes.