Security updates from Ivanti, Citrix and Fortinet cover a combined 29 vulnerabilities, according to a review of the vendors' advisories by SecurityWeek. The most urgent distinction is that Ivanti has acknowledged exploitation of a flaw affecting limited versions of Connect Secure. The other patches address serious issues, but they should not all be described as actively exploited.
Ivanti confirms exploitation
In its October security update, Ivanti said it was aware of limited exploitation in the wild involving Connect Secure and was working with affected organizations. The company recommends that customers running impacted versions upgrade to the fixed release and run its Integrity Checker Tool regularly. Its separate routine October disclosures for Neurons Patch for Intune and Xtraction were not known to be exploited at the time of publication, Ivanti said.
This distinction affects triage. A remotely accessible VPN appliance with evidence of exploitation warrants immediate attention to the vendor advisory, affected version range, update path and signs of compromise. Installing a patch is essential, but an organization should also inspect appliance integrity and relevant logs when the vendor says attacks may already have occurred.
Fortinet and Citrix fixes
SecurityWeek reports that Fortinet issued ten advisories covering 13 flaws, including critical issues in FortiSIEM and the FortiSandbox management interface. The cited impacts include unauthenticated code execution and authentication bypass, depending on the product and vulnerability. Administrators should consult the Fortinet PSIRT advisories for exact affected builds and fixed versions rather than applying one blanket recommendation across products.
Citrix published advisories for nine defects involving Workspace App for Windows, XenServer and UniconOS, according to the same review. The possible outcomes differ by product and include code execution, information disclosure and denial of service. Customers should check the Citrix security bulletins for their deployed versions and upgrade guidance.
The practical order is to identify affected Ivanti Connect Secure appliances first, especially internet-facing deployments, then inventory Fortinet and Citrix products against their individual advisories. The combined figure of 29 vulnerabilities summarizes the patch cycle; it does not mean every customer is exposed to every flaw or that each issue has the same urgency.