CVE-2025-0282

Vendor

Ivanti

Product

Connect Secure

CVSS v3.0

8.6

EPSS

0.87 (p100)

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 89
   Research Rapid7 18d ago

   Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

   Overview On October 13, 2026, Ivanti published a security advisory for CVE-2026-104935 , a high-severity authentication bypass by spoofing ( CWE-290 ) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score…

   Exploited CVSS 8.6 EPSS 0.87 Fix available CVE-2026-104935CVE-2025-0282 Ivanti
2. 49
   Malware analysis report CISA 28 Mar 2025

   MAR-25993211-r1.v2 Ivanti Connect Secure (RESURGE)

   Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained herein. The DHS does not…

   EPSS 1.00 CVE-2025-0282 Ivanti