Over 13,000 Ivanti gateways vulnerable to actively exploited bugs

Multiple high- and critical-severity vulnerabilities affecting Ivanti Connect Secure and Policy Secure appliances (CVE-2023-46805, CVE-2024-21887, CVE-2024-21893, CVE-2024-21888, CVE-2024-22024) have been disclosed and patched, but researchers report thousands of internet-exposed systems remain unpatched; evidence includes mass scanning activity, reports of exploitation by nation-state and other actors, and researcher counts showing large numbers of vulnerable endpoints.