ctrlINT What the industry said about every indicator, with the quote

CVE-2025-0282Vulnerability

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by Group-IB · last reported

Last reported 8 days ago

CISA KEVAdded 8 Jan 2025
Fix due 15 Jan 2025
Used by ransomware: knownCISA KEV catalogue
EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 15 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “…xploiting zero-days in Citrix NetScaler (CVE-2023-4966, aka CitrixBleed), Ivanti Connect Secure (CVE-2023-46805, CVE-2024-21887, and CVE-2025-0282), and Dell RecoverPoint for Virtual Machines (CVE-2026-22769).”

    SecurityWeekNews
    Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

  2. “…ploiting zero-day vulnerabilities in Citrix NetScaler (CVE-2023-4966) and Ivanti Connect Secure (CVE-2023-46805, CVE-2024-21887, and CVE-2025-0282) appliances to break a wide range of sectors, including legal services, SaaS providers, business-process outsourcers, technology, and…”

    The Hacker NewsNews
    China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

  3. “In 2025, the group exploited a zero-day vulnerability in Ivanti Pulse Connect VPN (CVE-2025-0282), then pivoted into downstream customer environments via cloud integrations.”

    Group-IBVendor
    Six Supply Chain Attack Groups to Watch Out for in 2026

Indicators reported together

named in the same reports

Also named with it: CVE-2023-4966, CVE-2024-21887, CVE-2023-46805, CVE-2026-102764, CVE-2026-22769, CVE-2024-57726, CVE-2024-57727, CVE-2024-57728

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2025-0282 here?
No account needed. We do not store your IP address.