Two vulnerabilities in Ivanti Connect Secure VPN devices can be chained together by a threat actor to craft malicious requests and execute arbitrary commands on the system.
Article Link: Two zero-days in Ivanti products actively exploited by threat actor | SC Media