Denial of Service Vulnerability in Ivanti Connect Secure and Related Products

CVE-2025-55146

What is CVE-2025-55146?

Ivanti products, including Ivanti Connect Secure, Ivanti Policy Secure, Ivanti ZTA Gateway, and Ivanti Neurons for Secure Access, are exposed to a vulnerability due to an unchecked return value. Exploitation of this flaw could allow a remote authenticated attacker with administrator privileges to initiate a denial of service, impacting the availability of the affected systems. Administrators are advised to apply the fixes deployed on August 2, 2025, to mitigate this risk.

References