An unauthenticated attacker can spoof the login check on Ivanti Connect Secure and run arbitrary commands on the gateway, with no credentials or user interaction required, and it’s already being exploited.