Firetruck

CVE-2025-22457

KEV · Ransomware
Updated Aug 4, 2026 · PUBLISHED
View KEV entry →

Description

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Connect SecureIvanti / Connect Secure22.7R2.6unaffected
Neurons for ZTA gatewaysIvanti / Neurons for ZTA gateways22.8R2.2unaffected
Policy SecureIvanti / Policy Secure22.7R1.4unaffected