VulnSocial

CVE-2024-21894Active Exploitation(ivanti / connect_secure)

MEDIUMCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch ivanti connect_secure systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of arbitrary code

ivanti CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-787CWE-703

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • connect_secure
  • policy_secure

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
ivanti
Products
connect_securepolicy_secure

8 versions affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-14: 1Active Exploitation · 2026-06-14: 1Patch / Workaround · 2026-06-14: 1Technical Details · 2026-06-14: 106-14
Signal classification1 categories
Active Exploitation
1100.0%
Full discourse1 post
  • MAKHLOUF Med@CameleonGoods
    Active Exploitation

    تحذير أمني عاجل: تم اكتشاف ثغرة خطيرة جديدة (CVE-2024-21894) في بوابات Ivanti Connect Secure و Policy Secure، والتي تسمح للمهاجمين بتجاوز المصادقة والوصول للموارد الحساسة. أضافت وكالة CISA الأمريكية هذه الثغرة إلى قائمة الثغرات المستغلة المعروفة، مما يؤكد على ضرورة التحرك الفوري. يُنصح بشدة جميع المسؤولين بتطبيق التحديثات الأمنية التي أصدرتها الشركة المصنعة دون تأخير لحماية الشبكات من الهجمات المحتملة. #أمن_سيبراني #حماية_البيانات #CyberSecurity #Ivanti

    Post summary

    CVE-2024-21894 is an authentication‑bypass vulnerability in Ivanti Connect Secure and Policy Secure that is actively exploited in the wild, as confirmed by CISA, and vendor‑issued patches are available.

    00020157
    1.1K followersView on X
CPE platform detail60 entries

60 of 60 entries

PartVendorProductVersionTarget SWTarget HW
Appivanticonnect_secure22.1--
Appivanticonnect_secure22.2--
Appivanticonnect_secure22.3--
Appivanticonnect_secure22.4--
Appivanticonnect_secure22.5--
Appivanticonnect_secure22.6--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivanticonnect_secure9.1--
Appivantipolicy_secure22.1--
Appivantipolicy_secure22.2--
Appivantipolicy_secure22.3--
Appivantipolicy_secure22.4--
Appivantipolicy_secure22.5--
Appivantipolicy_secure22.6--
Appivantipolicy_secure9.0--
Appivantipolicy_secure9.0--
Appivantipolicy_secure9.0--
Appivantipolicy_secure9.0--
Appivantipolicy_secure9.0--
Appivantipolicy_secure9.0--
Appivantipolicy_secure9.0--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--
Appivantipolicy_secure9.1--

Explore more

Back to dashboardivanti CVEsconnect_secure vulnerabilities