Zero Trust Access Gateway vulnerabilities | LiveThreat CVE Feed

Product

Zero Trust Access Gateway

by Ivanti · last CVE Sep 9, 2025

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities17 In the news0 Timeline

Severity mix

Critical 1High 8Medium 8Low 0

Severity

All severities17 Critical1 High8 Medium8 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Zero Trust Access Gateway to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-55139	6.8	1%	Sep 9	SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before… Affected: 22.8
CVE-2025-55143	6.1	1%	Sep 9	Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for… Affected: 22.8
CVE-2025-5468	5.5	0%	Aug 12	Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and… Affected: 22.8
CVE-2025-8712	5.4	0%	Sep 9	Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for… Affected: 22.8
CVE-2025-8711	5.4	0%	Sep 9	CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before… Affected: 22.8
CVE-2025-55144	5.4	1%	Sep 9	Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure… Affected: 22.8
CVE-2025-55146	4.9	1%	Sep 9	An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for… Affected: 22.8
CVE-2025-5466	4.9	1%	Aug 12	XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before… Affected: 22.8