Critical Ivanti Sentry vulnerability actively exploited for remote code execution
governmenthealthcarepost-secondaryfinanceenergy
A maximum-severity flaw in Ivanti Sentry secure mobile gateways is now being actively exploited by attackers in the wild. The vulnerability allows remote code execution with root-level privileges on internet-facing deployments. Organizations running vulnerable versions without patches are at immediate risk of compromise.
Why it matters in Western Canada: Western Canadian government, healthcare, and post-secondary institutions commonly deploy Ivanti Sentry for secure remote access. Active exploitation increases urgent patching requirements for affected organizations across BC, Alberta, Saskatchewan, and Manitoba.
Summary generated from the original advisory. Read the full source: bleepingcomputer
- Source
- https://www.bleepingcomputer.com/news/security/max-severity-ivanti-sentry-vulnerability-now-exploited-in-attacks/
- CVEs
- None listed
- Tags
- ivanti-sentry, remote-code-execution, active-exploitation, vpn-gateway, critical-patch
- Provenance
- mask2-ti-pipeline (AI-assisted, human-reviewable)