CVE-2022-36983

CVE-2022-36983 is a critical authentication bypass vulnerability affecting Ivanti Avalanche, allowing remote attackers to gain unauthorized access by exploiting insufficient authentication checks within the SetSettings class. With a CVSS score of 9.8 Critical, this flaw is easily exploitable over the network without authentication or user interaction, leading to full compromise of confidentiality, integrity, and availability. Although no public exploit code is currently available on common platforms, its high EPSS score and "Active" status on the Hot List indicate a significant probability of future exploitation, warranting immediate attention.