CVE-2025-22467Disclosure(ivanti / connect_secure)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.

ivanti CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://forums.ivanti.com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs

Weakness type (CWE)

CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

connect_secure

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

ivanti

Products

connect_secure

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.acn.gov.it/portale/w/la-settimana-cibernetica-del-1-febbraio-2026-1

Full discourse1 post

Hephaestvs@Vulcanux_249d
Disclosure
csirt_it: La Settimana Cibernetica del 01 febbraio 2026 🔹 aggiornamenti per molteplici prodotti 🔹Ivanti: rilevate due nuove vulnerabilità, di cui una di tipo zero-day ⚠️ #EPSS: 🔹Ivanti: CVE-2025-22467 🔹n8n: CVE-2026-21877 🔗https://www.acn.gov.it/portale/w/la-settimana-cibernetica-del-1-febbraio-2026-1 https://t.co/Pa72e14xe5
Post summary
The post announces new Ivanti and n8n vulnerabilities, including a zero‑day, without providing PoC, exploit, or mitigation details.
0000090
607 followersView on X

CPE platform detail13 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

13 of 13 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ivanti	connect_secure	-	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-
App	ivanti	connect_secure	22.7	-	-

Explore more

Back to dashboard ivanti CVEs connect_secure vulnerabilities