Attackers are actively exploiting a maximum-severity vulnerability in Ivanti Sentry, a secure mobile gateway, that was recently patched. The flaw allows unauthenticated code execution with root privileges on internet-exposed systems, according to BleepingComputer.
The vulnerability carries the highest possible severity rating, though a specific CVSS score was not provided in the report. The exploitation is ongoing, with attackers targeting systems that remain unpatched. The exact number of affected gateways is unknown, but the risk is elevated for any organization with exposed Ivanti Sentry instances.
The attack vector involves sending specially crafted requests to the vulnerable gateway, bypassing authentication to achieve remote code execution at the root level. BleepingComputer did not disclose specific indicators of compromise or technical exploit details in the report.
Ivanti has released a security patch to address the flaw. Organizations using Ivanti Sentry are urged to apply the update immediately, as there is no mention of available workarounds. The timeline for the patch release was not specified beyond it being recent.
The broader threat landscape context was not discussed in the source, nor was attribution for the attacks identified. The exploitation marks a significant escalation for this vulnerability, which was initially disclosed with a patch but now faces real-world attacks.