NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2025-22467

CVSS 3.1: 8.8 high
EPSS: 5%p91
Published: Feb 11, 2025 · Feb 11, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-22467 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.

Vendors: ivanti

Products: connect secure

Weakness: CWE-121

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.7%)

In the news

3 stories

⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and More

The Hacker NewsJun 10, 09:34 UTC · Jun 10, 2025Phishing & fraudCVE-2025-1094 CVE-2025-0108 CVE-2025-23359+313 · 1 read

60

Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware

The Hacker NewsApr 7, 06:39 UTC · Apr 7, 2025MalwareExploitedCVE-2025-22457 CVE-2024-38657 CVE-2025-22467+22

60

Ivanti Patches Critical Flaws in Connect Secure and Policy Secure

The Hacker NewsFeb 18, 12:12 UTC · Feb 18, 2025VulnerabilityExploitedCVE-2024-38657 CVE-2025-22467 CVE-2024-10644+73

60