CVE-2025-22467

—1

CVSS 3.1

8.8 high

EPSS

5%p91

Published

Feb 11, 2025 (Feb 11, 2025)

Modified

Jun 17, 2026

Description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.

Vendors: ivanti
Products: connect secure
Weakness: CWE-121
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.7%)

In the news3 stories

⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and More

The Hacker NewsJun 10, 09:34 UTC · Jun 10, 2025Phishing & fraud CVE-2025-1094 CVE-2025-0108 CVE-2025-23359+31 CVEs

60

Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware

The Hacker NewsApr 7, 06:39 UTC · Apr 7, 2025Malware in the wildCVE-2025-22457 CVE-2024-38657 CVE-2025-22467+2 CVEs

60

Ivanti Patches Critical Flaws in Connect Secure and Policy Secure

The Hacker NewsFeb 18, 12:12 UTC · Feb 18, 2025Vulnerability in the wildCVE-2024-38657 CVE-2025-22467 CVE-2024-10644+7 CVEs

60