Alert: Ivanti Releases Patch for Critical Vulnerability in Endpoint Manager Solution

Ivanti released patches for critical vulnerabilities in Endpoint Manager (CVE-2023-39336, SQL injection with potential RCE) and for multiple critical buffer-overflow flaws in Avalanche MDM; while the specific issues lack evidence of active exploitation, prior zero-day attacks against other Ivanti products by state-backed actors heighten the risk to enterprise deployments.