vulns.co
/
GKData.io MCP

Back to CVEs

CVE-2024-21887 - Ivanti Connect Secure Command Injection

Command injection chained with an auth-bypass (CVE-2023-46805) for unauthenticated RCE.

Tags: rce, command-injection, ivanti, chained

Product
Ivanti Connect Secure
Severity
critical (CVSS 9.1)
Published / added
2024-01
Signals
CISA KEV

References and evidence