Critical Ivanti RCE flaw with public exploit now used in attacks

A critical SQL injection vulnerability (CVE-2024-29824) in Ivanti Endpoint Manager's Core server enables unauthenticated attackers on the same network to achieve remote code execution; Horizon3.ai published a proof-of-concept and Ivanti confirmed limited in-the-wild exploitation, prompting CISA to add the flaw to its Known Exploited Vulnerabilities catalog and require federal agencies to patch vulnerable appliances promptly.