A critical vulnerability affecting Ivanti mobile management tools is now seeing exploitation by threat actors, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) disclosed Thursday.