Ivanti Connect Secure RCE Vulnerability Actively Exploited in the Wild – Apply Patch Now!

**Ivanti CVE-2025-22457 executive summary:** Ivanti disclosed a CVSS 9.0 stack-based buffer overflow (CVE-2025-22457) in Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways that allows unauthenticated RCE and has been actively exploited since mid-March 2025 by UNC5221 to deploy malware (Trailblaze, Brushfire, Spawn) and perform log tampering; Ivanti released patches for supported versions and recommends immediate patching, ICT monitoring, factory reset if compromised, and limiting internet exposure of affected appliances.