Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

What happened

Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.

Affected versions

Connect Secure: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

• Review the original advisory and validate affected versions.
• Apply vendor-provided updates or mitigations when available.