CISA Issues Urgent Warning for Actively Exploited Ivanti Zero-Day Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Ivanti Connect Secure and Ivanti Policy Secure appliances to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation in the wild since at least October 1st, 2024. In a binding operational directive, CISA requires federal civilian executive branch agencies to patch the affected systems within a defined remediation window.

Ivanti has confirmed the vulnerability is being actively exploited and has released security updates to address the flaw. The company's products impacted include Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons. CISA's advisory emphasizes the urgency of patching, noting that the vulnerability allows for potential unauthorized access and compromise of affected appliances.

Security researchers and industry analysts have been tracking the exploitation, with CISA's inclusion in the KEV catalog signaling the severity and active nature of the threat. The directive applies to all federal civilian executive branch agencies, who must patch the vulnerability according to the timelines specified in Binding Operational Directive 24-01.