What’s Vulnerable › Vulnerabilities

CVE-2025-22457: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2025-04-04
• EPSS: 100.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-03 · updated 2026-08-04
• Weakness: CWE-121

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

Summary

CVE-2025-22457 is a critical (CVSS 9.8) stack-based buffer overflow in Ivanti Connect Secure before 22.7R2.6, Ivanti Policy Secure before 22.7R1.4, and Ivanti ZTA Gateways before 22.8R2.2 that lets a remote, unauthenticated attacker achieve remote code execution. It is listed in CISA's Known Exploited Vulnerabilities catalog with active exploitation, and EPSS estimates a 100% probability of exploitation within 30 days. Apply the fixed releases (22.7R2.6, 22.7R1.4, 22.8R2.2 respectively) and follow CISA's required mitigation instructions immediately.

CVE-2025-22457 ثغرة تجاوز سعة المخزن المؤقت على المكدس (stack-based buffer overflow) حرجة بدرجة CVSS 9.8 في Ivanti Connect Secure قبل الإصدار 22.7R2.6، وIvanti Policy Secure قبل 22.7R1.4، وIvanti ZTA Gateways قبل 22.8R2.2، وتتيح لمهاجم عن بُعد غير مصادَق عليه تنفيذ تعليمات برمجية عن بُعد. الثغرة مدرجة في كتالوج CISA للثغرات المعروفة الاستغلال مع استغلال نشط، وتقدّر EPSS احتمال الاستغلال خلال 30 يوماً بنسبة 100%. يجب تطبيق الإصدارات المُصلحة (22.7R2.6 و22.7R1.4 و22.8R2.2 على الترتيب) واتباع تعليمات التخفيف الإلزامية من CISA فوراً.

Affected products

• Ivanti Connect Secure (Pulse Secure): before 22.7; 22.7, 22.7-r1, 22.7-r1.1, 22.7-r1.2, 22.7-r1.3, 22.7-r1.4 (+7) — fixed in 22.7
• Ivanti Policy Secure: before 22.7; 22.7, 22.7-r1, 22.7-r1.1, 22.7-r1.2, 22.7-r1.3 — fixed in 22.7
• Ivanti Zero Trust Access Gateway: before 22.8; 22.8, 22.8-r2.1 — fixed in 22.8

How to fix

Upgrade to a fixed version: Ivanti Connect Secure (Pulse Secure) 22.7; Ivanti Policy Secure 22.7; Ivanti Zero Trust Access Gateway 22.8. Check the vendor advisory for mitigations.

References

• https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-22457

Get alerted when CVE-2025-22457 or the next vulnerability affects your stack