Ivanti warns of a new Cloud Services Appliance (CSA) vulnerability (CVE-2024-8963) actively exploited in attacks.The vulnerability allows remote unauthenticated attackers to access restricted functionality.Attackers can combine this flaw with CVE-2024-8190 to bypass admin authentication and execute arbitrary commands.CSA 4.6 is affected, and customers are advised to upgrade to Ivanti CSA 5.0 for continued support.