Ivanti Sounds Alarm on Active Exploitation of Flaw in Cloud Service Appliance

Ivanti has released a patch for a high-severity vulnerability, CVE-2024-8190, affecting its Cloud Services Appliance (CSA). This OS command injection flaw allows a remote authenticated attacker to execute arbitrary commands on the system, potentially gaining full control through remote code execution (RCE). Alarmingly, this vulnerability has already been actively exploited in the wild. Ivanti strongly urges all users to apply the latest security update immediately to mitigate this critical threat.