The vulnerability of Ivanti Connect Secure (formerly Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons for ZTA – tools for managing IT services – stems from reading data outside of the buffer in memory. This allows attackers to execute arbitrary code.

Ivanti Connect Secure, Policy Secure, and Neurons for ZTA overread memory, enabling remote code execution.

Reporter	Title	Published	Views	Family All 55
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	22 Jan 202508:14	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	11 Jan 202502:06	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	16 Jan 202514:45	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	22 Jan 202508:14	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	12 Jan 202511:58	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	7 Jun 202518:39	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	10 Mar 202521:33	–	githubexploit
GithubExploit	Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure	15 Jan 202518:27	–	githubexploit
0day.today	Ivanti Buffer Overflow Proof of Concept Exploit	16 Jan 202500:00	–	zdt
ATTACKERKB	CVE-2025-0282	8 Jan 202500:00	–	attackerkb

Vulners

Node

ivanti connect_secureRange22.7r2–22.7r2.5

ivanti policy_secureRange22.7r1–22.7r1.2

Source	Link
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283
cloud	www.cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day
labs	www.labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/
web	www.web.nvd.nist.gov/view/vuln/detail

21 Apr 2026 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 27.6

CVSS 39

EPSS0.99971