Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

Vendors Citrix, Fortinet, and Ivanti collectively patched 29 vulnerabilities, including critical flaws enabling authentication bypass, remote code execution, and data leakage. Most alarming is an actively exploited zero-day in Ivanti Connect Secure VPN, where attackers chained two bugs together to achieve compromise — underscoring that unpatched network edge devices are prime targets. The fact that this zero-day was already being exploited in the wild at the time of disclosure means organizations that delayed patching were exposed. Network appliances like VPNs and firewalls are especially high-value targets because they sit at the perimeter and often have privileged access to internal systems. Prompt patching of these devices is not optional — it is a fundamental security baseline.