CISA Warns Of Critical Vulnerabilities In Major Platforms

**Executive summary:** CISA added multiple vulnerabilities to its KEV catalog — notably critical RCE/OS-injection flaws such as CVE-2024-45519 (Zimbra, CVSS 9.8), CVE-2020-15415 (DrayTek, CVSS 9.8), and a high-severity Ivanti SQL injection (CVE-2024-29824, CVSS 8.8) — with reported mass scanning/exploitation and large numbers of exposed instances; organizations are urged to apply patches, implement network segmentation, and maintain incident response readiness.