CVE-2024-7593
IV
Ivanti Virtual Traffic Manager
Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
What it is
Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated attacker to create a chosen administrator account.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-
- nvd.nist.gov/vuln/detail/CVE-2024-7593
Description and required action as published by CISA. Full record at NVD.
Other Ivanti entries on the list
- Connect Secure Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability CVE-2026-118527 · Oct 30, 2026
- Connect Secure Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-111357 · Oct 30, 2026
- Connect Secure Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability CVE-2026-104935 · Oct 13, 2026
- Sentry Ivanti Sentry OS Command Injection Vulnerability CVE-2026-10520 · Jun 11, 2026
- Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability CVE-2026-6973 · May 7, 2026
- Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability CVE-2026-1340 · Apr 8, 2026