Ivanti Patches New Security Flaws Affecting Endpoint Manager, EPMM, Sentry, CSA, and Workspace Manager

Ivanti has disclosed multiple high-severity vulnerabilities across five products, including two critical flaws with CVSS scores of 9.8 and 9.4 that could enable remote code execution and unauthorized certificate manipulation without authentication. The breadth of affected products — Endpoint Manager, EPMM, Sentry, CSA, and Workspace Manager — highlights the risk of running enterprise management platforms with unpatched vulnerabilities, as these systems often have broad access to corporate networks. Unauthenticated remote code execution vulnerabilities are especially dangerous because attackers require no credentials to exploit them, dramatically lowering the barrier to compromise. Organizations relying on Ivanti products must treat these updates as urgent, given Ivanti's history of being a high-value target for nation-state and ransomware actors.