CVE-2023-46805

This flaw lives in the web-facing parts of certain Ivanti security systems. Normally, when you visit a protected page, the system checks whether you’re allowed in; this bug lets a remote attacker “pretend” they passed those checks and reach restricted resources anyway. Think of it like a building where the receptionist is supposed to verify your badge, but this vulnerability lets someone slip through the gate without proving they’re authorized.

This matters to you if you run or manage Ivanti ICS (versions 9.x and 22.x), Ivanti IPS, Ivanti Policy Secure, or Ivanti Connect Secure, especially if they’re reachable from the internet or from untrusted networks. Ivanti Policy Secure and the Ivanti web components are specifically called out as affected. If you don’t use these Ivanti products, this CVE likely doesn’t apply to you.

This is RED for a reason: it has a very high likelihood of being exploited, public attacks are available, and it has been used in the real world in ransomware. Even if exploitation was not widely reported as active in the same way everywhere, the combination of known exploited status and available tools means you should treat this as an urgent patching and exposure-reduction task. Start now rather than waiting for a “quiet period” to end.