CVE-2025-0282

VendorivantiProductconnect secure, policy secure, neurons for zero-trust accessDiscoveredJan 8, 2025UpdatedOct 1, 2026

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

View graph Watch Export

CVSS v3.1

9 CRITICAL

EPSS

99.9%

probability of exploitation in 30 days

CISA KEV

Listed

confirmed active exploitation

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Oct 22, 2026

● 0.01pp

99.9% → 99.9% over 3 tracked changes

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityHIGH

Privileges RequiredNONE

User InteractionNONE

ScopeCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Connections

6 relationships

Timeline

disclosure → media coverage

Jan 8, 2025

Disclosure — published as a CVE record. · last revised by NVD Oct 1, 2026

Feb 27, 2026

bleepingcomputer.com reports: CISA warns that RESURGE malware can be dormant on Ivanti devices

Public PoC (10)

github.com/absholi7ly/CVE-2025-0282-Ivanti-exploit github.com/AnonStorks/CVE-2025-0282-Full-version github.com/rxwx/pulse-meter github.com/watchtowrlabs/CVE-2025-0282 github.com/sfewer-r7/CVE-2025-0282 github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser github.com/almanatra/CVE-2025-0282 github.com/AdaniKamal/CVE-2025-0282 github.com/gmh5225/Blackash-CVE-2025-0282 github.com/razureink/cve-2025-0282-ivanti_rce_reproduction

Unverified third-party code — review before executing.