References https://nvd.nist.gov/vuln/detail/CVE-2024-21893 https://www.ivanti.com/blog/security-update-for-ivanti-connect-secure-and-ivanti-policy-secure-gateways https://thehackernews.com/2024/02/recently-disclosed-ssrf-flaw-in-ivanti.html https://forums.ivanti.com/s/article/CVE-2024-21888-Privilege-Escalation-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21893 https://github.com/h4x0r-dz/CVE-2024-21893.py https://www.rapid7.com/db/modules/exploit/linux/http/ivanti_connect_secure_rce_cve_2024_21893/ https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-060b https://www.tenable.com/plugins/nessus/190062 https://cvefeed.io/vuln/detail/CVE-2024-21893
Related VulnerabilitiesPoCCVE-2026-1281: Ivanti EPMM <=12.7.0.0 - Unauthenticated Code InjectionPoCCVE-2015-7501: Red Hat JBoss - Insecure DeserializationPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization英華達|全家寶 Cloud - Insecure Direct Object ReferencePoCCVE-2026-10520: Ivanti Sentry - OS Command InjectionPoCCVE-2026-46725: TYPO3 ceselector Extension - Insecure DeserializationIvanti Sentry存在操作系统命令注入漏洞(CVE-2026-10520)Ivanti Sentry /mics/api/v2/sentry/mics-config/handleMessage 命令执行漏洞(CVE-2026-10520)Ivanti EPMM /mifs/rs/api/v2/featureusage 命令执行漏洞(CVE-2025-4427)沛盛資訊|OMICARD EDM - Insecure Direct Object Reference金財通商務科技|Service Center - Insecure Direct Object ReferenceSecurePoint UTM /spcgi.cgi 信息泄露漏洞(CVE-2023-22620)日躍科技|App好校通 - Insecure Direct Object Reference