Ivanti Connect Secure vulnerabilities

www.ncsc.gov.uk • April 15, 2026

The NCSC is encouraging UK organisations to mitigate an unauthenticated remote code execution vulnerability affecting F5 BIG-IP Access Policy Manager.

UK organisations encouraged to take immediate action to mitigate two recently disclosed vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway.

Agencies strongly encourage immediate investigation of potential compromise of Cisco Catalyst SD-WAN.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Urgent Mitigation Needed for Multiple Cyber Vulnerabilities in UK Organizations The NCSC has issued an urgent advisory for UK organizations to address critical vulnerabilities affecting F5 BIG-IP Access Policy Manager, Citrix NetScaler ADC, and Citrix NetScaler Gateway. These vulnerabilities include an unauthenticated remote code execution flaw that could allow attackers to execute arbitrary code on affected systems. Organizations are encouraged to investigate potential compromises, particularly regarding Cisco Catalyst SD-WAN. The advisory highlights the necessity for immediate action to mitigate these risks. Specific CVEs were not mentioned in the articles, but the vulnerabilities pose significant threats to the security of affected systems. The NCSC's recommendations aim to prevent exploitation and safeguard sensitive data. Organizations are urged to apply patches and enhance their security measures promptly. 2 sources 69

Extracted Entities

Ivanti Connect Secure vulnerabilities

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (5)