Today, Ivanti urged customers to patch a critical authentication bypass vulnerability impacting Virtual Traffic Manager (vTM) appliances that can let attackers create rogue administrator accounts.
WSO2 API Manager JWT bypass faces active exploitation attempts using forged tokens with administrator privileges.