# CVE-2025-0282

> A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

- **CVSS:** 9 (CRITICAL)
- **EPSS:** 94.1%
- **CISA KEV:** yes (known ransomware use)
- **CWE:** CWE-121, CWE-787

Canonical: https://intel.threadlinqs.com/cve/CVE-2025-0282
Full threat coverage + IOCs via the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp