Virtual Traffic Manager vulnerabilities

2 known vulnerabilities in Virtual Traffic Manager from Ivanti. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Virtual Traffic Manager: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-8051May 12, 2026IvantiEPSS 1.91%

  OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

• 9.8 Critical severity

  Ivanti Virtual Traffic Manager Authentication Bypass Exploited

  CVE-2024-7593Aug 13, 2024IvantiEPSS 100%

  Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.