CVE-2025-0282

Summary

CVE-2025-0282 is a critical vulnerability affecting Ivanti Connect Secure versions before 22.7R2.5, Ivanti Policy Secure before 22.7R1.2, and Ivanti Neurons for ZTA gateways before 22.7R2.3. This issue results in a stack-based buffer overflow, which can be exploited by an unauthenticated attacker to execute arbitrary code remotely. Successful exploitation could lead to serious consequences, including data theft, system compromise, or unauthorized network access. Organizations using the affected Ivanti products are advised to upgrade to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.