CVE-2025-22457
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
What is affected
| Vendor | Ivanti |
|---|---|
| Product | Connect Secure, Policy Secure, and ZTA Gateways |
| Weakness | CWE-121 |
The vulnerability
Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.
Required action
Apply mitigations as set forth in the CISA instructions linked below.
US federal civilian agencies were required to act by 11 April 2025 under BOD 22-01. The deadline is a compliance date, not a measure of severity — it says nothing about how dangerous the flaw is to anyone else.
Ransomware
CISA records this vulnerability as having been used in ransomware campaigns. That is a confirmed observation, not an assessment of likelihood.
Where this comes from
Every field on this page is taken from the CISA Known Exploited Vulnerabilities catalog, last synced 13 Nov 2026, 00:30. Nothing here is our own assessment. For the technical scoring, see the NVD record below.
More from Ivanti
Ivanti Connect Secure
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
CVE-2026-111357Ivanti Connect Secure
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
CVE-2026-104935Ivanti Connect Secure
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
CVE-2026-10520Ivanti Sentry
Ivanti Sentry OS Command Injection Vulnerability