Ivanti Connect Secure / Policy Secure / ZTA vulnerabilities

8 advisories, 8 actively exploited. Last update: October 30, 2026.

Running Connect Secure / Policy Secure / ZTA devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Connect Secure / Policy Secure / ZTA alerts

CVE-2026-111357October 30, 2026High 7Exploited
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
CVE-2026-118527October 30, 2026Severity n/aExploited
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
CVE-2026-104935October 13, 2026High 8.6Exploited
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
CVE-2025-22457April 4, 2025Critical 9Exploited
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVE-2025-0282January 8, 2025Critical 9Exploited
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVE-2024-21893January 31, 2024High 8.2Exploited
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
CVE-2024-21887January 10, 2024Critical 9.1Exploited
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
CVE-2023-46805January 10, 2024High 8.2Exploited
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability