Back to the CVE list
CVE-2024-21887 CISA KEV · Actively exploitedLinked to ransomware

Vulnerability in Ivanti ICS

CVSS score

9.1

EPSS probability

%100.0

Risk score

18.2

Published

2 y ago

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

The Record16.10.2026

Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day

An alleged Chinese state-backed group is using a new zero-day affecting BeyondTrust IT support software to conduct espionage attacks.

SecurityWeek16.10.2026

Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek.

The Hacker News16.10.2026

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-21887"