Critical Ivanti vTM auth bypass bug now exploited in attacks

Ivanti vTM has a critical authentication-bypass vulnerability (CVE-2024-7593) that can let unauthenticated attackers create admin accounts; public PoC exists and CISA has marked it as actively exploited in its KEV catalog, so organizations should apply patches, check audit logs for new 'user1'/'user2' admin accounts, and restrict exposure of the management interface.