CVSS 9.8ACTIVELY EXPLOITED4 sources verified·1 min read
By Lyrie Threat Intelligence·5/14/2026
CRITICAL: CVE-2024-7593 actively exploited — ivanti virtual traffic manager
CVE: CVE-2024-7593
CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL
Status: ✅ Confirmed exploited in the wild (CISA KEV)
Affected
- ivanti virtual traffic manager
Summary
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
Verified Sources
References
- https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7593
_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._
Lyrie Verdict
Lyrie's autonomous detection layer catches active exploitation primitives at machine speed — closing the gap between disclosure and weaponization that traditional defense simply can't cover.
Validated sources
- [1]NVD
- [2]GitHub Advisory
- [3]MITRE
- [4]CISA KEV
Related Articles
active exploitation
A PoC/exploit has been discovered for vulnerability CVE-2026-0740
PT ID: PT-2026-30693
Vendor: SaturdayDrive
Product:
1 min read · 1 sources
active exploitation
Anthropic's Mythos Preview found a previously undiscovered 27-year-old OpenBSD flaw and wrote a full RCE exploit for Fre
1 min read · 1 sources
cve deepdive
CRITICAL: CVE-2022-48174 (CVSS 9.8) — debian debian linux
1 min read · 3 sources