Ivanti Virtual Traffic Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Ivanti Virtual Traffic Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-7593 — CVSS 9.8 (critical) — actively exploited: Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated…
• CVE-2026-8051 — CVSS 7.2 (high): OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges…