CS
VPN
Connect Secure
by Ivanti · last CVE Oct 15, 2026
On CISA KEVExploited in the wildRansomware-linked
132
CVEs
15
On KEV
10.0
Max CVSS
2
New 30D
Severity mix
Critical 15High 69Medium 46Low 2
Watch

Add Connect Secure to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-22893
RansomwareIn wildKEV
10.0
47%
Apr 23
Ivanti Pulse Connect Secure Use-After-Free Vulnerability
Affected: PCS 9.0R3 or above, PCS 9.1R1 and above
CVE-2019-11510
RansomwareIn wildKEV
10.0
100%
May 8
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
Affected: 8.2; 8.2; 8.2; 8.2; 8.2; 8.2; +31 more
CVE-2025-22457
RansomwareIn wildKEV
9.8
100%
Apr 3
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Affected: before 22.7; 22.7; 22.7; 22.7; 22.7; 22.7; +8 more
CVE-2024-21887
RansomwareIn wildKEV
9.1
100%
Jan 12
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
Affected: 9.1R18 through 9.1R18; 22.6R2 through 22.6R2
CVE-2025-0282
RansomwareIn wildKEV
9.0
100%
Jan 8
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Affected: 22.7R2 through 22.7R2.4
Showing 5