CVE-2024-11006: Command Injection Vulnerability in Ivanti Connect Secure and Policy Secure. This vulnerability allows a remote authenticated attacker with admin privileges to achieve remote code execution. Affected versions include Ivanti Connect Secure before 22.7R2.1 and Ivanti Policy Secure before 22.7R1.1, excluding 9.1Rx versions. Despite a CVSS score of 7.2, the SOCRadar Vulnerability Risk Score (SVRS) is 30, indicating a lower immediate threat level compared to vulnerabilities with scores above 80. However, the potential for remote code execution makes this a serious security risk. While not immediately critical based on SVRS, patching is still highly recommended to prevent exploitation by threat actors. This command injection vulnerability highlights the importance of timely security updates for network security appliances.