Connect Secure / Policy Secure / ZTA 25.1 vulnerabilities
2 advisories affect Ivanti Connect Secure / Policy Secure / ZTA 25.1, 2 already exploited by attackers. Latest: October 30, 2026.
Running Connect Secure / Policy Secure / ZTA 25.1 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Connect Secure / Policy Secure / ZTA 25.1 alerts
Turn on Connect Secure / Policy Secure / ZTA 25.1 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability CVE-2026-118527 · October 30, 2026 | Medium 4.3 Exploited | from 25.1.0.0 to before 25.1.1.3 Fixed in 25.1.1.3 |
| Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability CVE-2026-104935 · October 13, 2026 | High 8.6 Exploited | from 25.1.0.0 to before 25.1.1.2; from 25.1.2.0 to before 25.1.3.0 Fixed in 25.1.3.0 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other Connect Secure / Policy Secure / ZTA versions: 22.8 · 22.7