Connect Secure / Policy Secure / ZTA 22.8 vulnerabilities
3 advisories affect Ivanti Connect Secure / Policy Secure / ZTA 22.8, 3 already exploited by attackers. Latest: October 30, 2026.
Running Connect Secure / Policy Secure / ZTA 22.8 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Connect Secure / Policy Secure / ZTA 22.8 alerts
Turn on Connect Secure / Policy Secure / ZTA 22.8 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-111357 · October 30, 2026 | High 7 Exploited | 22.8R2.4 |
| Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability CVE-2026-104935 · October 13, 2026 | High 8.6 Exploited | 22.8R2 – 22.8R2.4 |
| Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability CVE-2025-22457 · April 4, 2025 | Critical 9 Exploited | all versions up to 22.8R2.1 Fixed in 22.8R2.2 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other Connect Secure / Policy Secure / ZTA versions: 22.7