← Front PageVulnerabilities Desk
Vulnerabilities
CVE-2025-0282 and CVE-2025-0283: Critical Ivanti 0days Exploited in the Wild
Zero-day exploitation of Ivanti Connect Secure introduces immediate enterprise VPN compromise risk, particularly threatening European organizations dependent on these appliances for remote workforce security.
Summary written by editorial AI · Source link below
CVSS9.0criticalCVE-2025-0282+1 more
Detect and mitigate CVE-2025-0282, a critical RCE vulnerability in Ivanti Connect Secure and CVE-2025-0283, exploited as 0day vulnerabilities in the wild. Organizations should patch urgently.
Continue at the source
Read the full report at Wiz BlogExternal link — opens at Wiz Blog in a new tab.
§
Continue with
More from the Vulnerabilities Desk
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers1d
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software2d
- Abandoned Popcorn Time app exposed millions of devices to RCE attacks3d
- HPE patches eight max severity RCE and auth bypass AOS flaws3d
- Compromised TLS Certificates3d