CVE-2025-55141: Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and…

PriorityP261high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

0.85%

53.8th percentile

Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure authentication related settings.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
ivanti	connect_secure	< 22.7	22.7
ivanti	connect_secure	—	—
ivanti	neurons_for_secure_access	< 22.8	22.8
ivanti	neurons_for_secure_access	—	—
ivanti	policy_secure	< 22.7	22.7
ivanti	policy_secure	—	—
ivanti	zero_trust_access_gateway	—	—

Detection & IOCsextracted from sources · hover to see the quote

→Attacker must be a remote authenticated user with read-only admin privileges — monitor for read-only admin accounts making changes to authentication-related settings in Ivanti Connect Secure, Policy Secure, ZTA Gateway, or Neurons for Secure Access ↗

·Ivanti Connect Secure versions before 22.7R2.9 or 22.8R2 are vulnerable; patch to 22.7R2.9+ or 22.8R2+ ↗
·Ivanti Policy Secure versions before 22.7R1.6 are vulnerable; patch to 22.7R1.6+ ↗
·Ivanti ZTA Gateway versions before 2.8R2.3-723 are vulnerable; patch to 2.8R2.3-723+ ↗
·Ivanti Neurons for Secure Access versions before 22.8R1.4 are vulnerable; fix was deployed on 02-Aug-2025 ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.