Ivanti Releases Urgent Fix for Critical Sentry RCE Vulnerability

Ivanti disclosed critical flaws—CVE-2023-41724 (unauthenticated RCE, CVSS 9.6) affecting Standalone Sentry and CVE-2023-46808 (authenticated remote file write → code execution, CVSS 9.9) affecting Neurons for ITSM—and released patches for affected versions; the report also highlights a separate mXSS issue in Mailspring (CVE-2023-47479) and notes that Ivanti has previously seen exploitation of its products by suspected China-linked clusters (UNC5221, UNC5325, UNC3886).