Connect Secure vulnerabilities

56 known vulnerabilities in Connect Secure from Ivanti. 55 are rated high or critical, and 17 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 4.3 Medium severity

  Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Exploited

  CVE-2026-118527Nov 3, 2026Ivanti

  Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.

• 7.0 High severity

  Ivanti Connect Secure Missing Authentication for Critical Function Exploited

  CVE-2026-111357Oct 15, 2026Ivanti

  Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

• 8.6 High severity

  Ivanti Connect Secure Authentication Bypass by Spoofing Exploited

  CVE-2026-104935Oct 13, 2026IvantiEPSS 88.9%

  Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

• 7.6 High severity

  Connect Secure: Missing Authorization

  CVE-2025-55148Sep 9, 2025Ivanti

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticat

• 8.8 High severity

  Connect Secure: Cross-Site Request Forgery

  CVE-2025-55147Sep 9, 2025Ivanti

  CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to

• 8.9 High severity

  Connect Secure 22.7R2.9: Missing Authorization

  CVE-2025-55145Sep 9, 2025Ivanti

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticat

• 8.8 High severity

  Connect Secure: Missing Authorization

  CVE-2025-55142Sep 9, 2025Ivanti

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticat

• 8.8 High severity

  Connect Secure: Missing Authorization

  CVE-2025-55141Sep 9, 2025Ivanti

  Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticat

• 7.5 High severity

  Connect Secure: Heap-based Buffer Overflow

  CVE-2025-5462Aug 12, 2025IvantiEPSS 1.2%

  A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote una

• 7.5 High severity

  Connect Secure: Out-of-bounds Read

  CVE-2025-5456Aug 12, 2025IvantiEPSS 1.18%

  A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote

• 9.8 Critical severity

  Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Exploited

  CVE-2025-22457Apr 3, 2025IvantiEPSS 100%

  A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

• 8.8 High severity

  Connect Secure: Stack-based Buffer Overflow

  CVE-2025-22467Feb 11, 2025IvantiEPSS 4.66%

  A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.

• 7.2 High severity

  Connect Secure: Improper Control of Generation of Code

  CVE-2024-10644Feb 11, 2025IvantiEPSS 2.82%

  Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

• 7.0 High severity

  Connect Secure: Out-of-bounds Write

  CVE-2025-0283Jan 8, 2025IvantiEPSS 17.5%

  A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.

• 9.0 Critical severity

  Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Exploited

  CVE-2025-0282Jan 8, 2025IvantiEPSS 100%

  A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

• 7.5 High severity

  Connect Secure: Out-of-bounds Read

  CVE-2024-37401Dec 12, 2024IvantiEPSS 1.53%

  An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service.

• 7.5 High severity

  Connect Secure: Out-of-bounds Write

  CVE-2024-37377Dec 12, 2024IvantiEPSS 1.81%

  A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service.

• 8.8 High severity

  Connect Secure: Client-Side Enforcement of Server-Side Security

  CVE-2024-9844Dec 10, 2024Ivanti

  Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass restrictions.

• 7.2 High severity

  Connect Secure: Improper Neutralization of Special Elements used in a Command

  CVE-2024-11634Dec 10, 2024IvantiEPSS 1.84%

  Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution. (Not applicable to 9.1Rx)

• 7.2 High severity

  Connect Secure: Improper Neutralization of Argument Delimiters in a Command

  CVE-2024-11633Dec 10, 2024IvantiEPSS 1.69%

  Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution

• 9.1 Critical severity

  Connect Secure: Improper Neutralization of Argument Delimiters in a Command

  CVE-2024-39712Nov 13, 2024IvantiEPSS 1.73%

  Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

• 9.1 Critical severity

  Connect Secure: Improper Neutralization of Argument Delimiters in a Command

  CVE-2024-39711Nov 13, 2024IvantiEPSS 1.73%

  Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

• 9.1 Critical severity

  Connect Secure: Improper Neutralization of Argument Delimiters in a Command

  CVE-2024-39710Nov 13, 2024IvantiEPSS 1.89%

  Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

• 7.8 High severity

  Connect Secure: Incorrect Permission Assignment for Critical Resource

  CVE-2024-39709Nov 13, 2024Ivanti

  Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1 (Not Applicable to 9.1Rx) allow a local authenticated attacker to escalate their privileges.

• 9.1 Critical severity

  Connect Secure: Improper Neutralization of Argument Delimiters in a Command

  CVE-2024-38656Nov 13, 2024IvantiEPSS 1.73%

  Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

• 7.2 High severity

  Connect Secure: Improper Neutralization of Argument Delimiters in a Command

  CVE-2024-38655Nov 13, 2024IvantiEPSS 1.73%

  Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

• 7.5 High severity

  Connect Secure: Out-of-bounds Read

  CVE-2024-38649Nov 13, 2024IvantiEPSS 1.94%

  An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a remote unauthenticated attacker to cause a denial of service.

• 7.5 High severity

  Connect Secure: Out-of-bounds Read

  CVE-2024-37400Nov 13, 2024IvantiEPSS 2.1%

  An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trigger an infinite loop, causing a denial of service.

• 7.2 High severity

  Connect Secure: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-11006Nov 12, 2024IvantiEPSS 1.64%

  Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.1 (Not Applicable to 9.1Rx) allows a remote authenticated attacker with admin privileges to achieve remote code executio

• 7.2 High severity

  Connect Secure: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-11005Nov 12, 2024IvantiEPSS 1.64%

  Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.1 (Not Applicable to 9.1Rx) allows a remote authenticated attacker with admin privileges to achieve remote code executio

• 8.8 High severity

  Connect Secure: Use After Free

  CVE-2024-9420Nov 12, 2024IvantiEPSS 1.43%

  A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution

• 7.5 High severity

  Connect Secure: NULL Pointer Dereference

  CVE-2024-8495Nov 12, 2024IvantiEPSS 1.4%

  A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service.

• 7.5 High severity

  Connect Secure: Out-of-bounds Write

  CVE-2024-47907Nov 12, 2024IvantiEPSS 1.56%

  A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service.

• 7.8 High severity

  Connect Secure: Untrusted Search Path

  CVE-2024-47906Nov 12, 2024Ivanti

  Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.2 (Not Applicable to 9.1Rx) allows a local authenticated attacker to escalate privileges.

• 7.2 High severity

  Connect Secure: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-11007Nov 12, 2024IvantiEPSS 1.64%

  Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.1 (Not Applicable to 9.1Rx) allows a remote authenticated attacker with admin privileges to achieve remote code executio

• 8.2 High severity

  Connect Secure: Improper Neutralization of CRLF Sequences

  CVE-2023-38551May 31, 2024IvantiEPSS 1%

  A CRLF Injection vulnerability in Ivanti Connect Secure (9.x, 22.x) allows an authenticated high-privileged user to inject malicious code on a victim’s browser, thereby leading to cross-site scripting attack.

• 7.5 High severity

  Connect Secure: Improper Check or Handling of Exceptional Conditions

  CVE-2024-29205Apr 25, 2024IvantiEPSS 1.58%

  An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a remote unauthenticated attacker to send specially crafted requests in-order-to cause s

• 9.8 Critical severity

  Connect Secure: Out-of-bounds Write

  CVE-2024-21894Apr 4, 2024IvantiEPSS 19%

  A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain co

• 8.2 High severity

  Connect Secure: Out-of-bounds Write

  CVE-2024-22053Apr 4, 2024IvantiEPSS 3.53%

  A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack or in certain c

• 7.5 High severity

  Connect Secure: NULL Pointer Dereference

  CVE-2024-22052Apr 4, 2024IvantiEPSS 3.75%

  A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack