Max severity Ivanti Sentry vulnerability now exploited in attacks

Multiple active, high-impact incidents affecting enterprise infrastructure and supply chains were reported. A maximum-severity Ivanti Sentry flaw enabling remote code execution as root is being actively exploited on Internet-exposed secure mobile gateways. Langflow suffers a high-severity path traversal (CVE-2026-5027) used to write arbitrary files on exposed servers. Microsoft disclosed and patched multiple actively exploited issues (Exchange XSS zero-day, privilege‑escalation flaws referenced as YellowKey/GreenPlasma/MiniPlasma, and a newly public Defender exploit “RoguePlanet”). Other noted