Ivanti has released critical security patches for multiple vulnerabilities across its Endpoint Manager, Cloud Service Appliance, and Workspace Control products. Among the most severe is a remote code execution (RCE) vulnerability, tracked as CVE-2024-29847 in Endpoint Manager. This flaw is caused by deserialization of untrusted data, which could allow unauthenticated attackers to gain access to the core server. This vulnerability has been patched in Endpoint Manager 2024 and 2022 Service Update 6 (SU6), with no current evidence of exploitation in the wild. Ivanti also fixed nearly two dozen additional critical and high-severity vulnerabilities across its products, including SQL injection flaws that could be exploited by administrators, as well as OS command injection, and local privilege escalation vulnerabilities in Workspace Control and Cloud Service Appliance. Ivanti attributes the rise in detected vulnerabilities to improved internal scanning, manual testing, and a stronger vulnerability disclosure process. Although past zero-day vulnerabilities in Ivanti’s VPN appliances have been exploited, the company has no evidence of current vulnerabilities being exploited and continues to improve its security measures for its extensive global customer base. CTIX analysts recommend that all Ivanti customers ensure that they are running the most secure version of software for their products to prevent exploitation.