The CVSS 9.8 authentication bypass in Ivanti’s traffic manager admin panel already has a proof-of-concept exploit (PoC) lurking in the wild.