Ivanti Security Updates – 13 August 2025

The addressed vulnerabilities could allow the attacker to trigger denial of service attacks, obtain sensitive information, or execute arbitrary code and gain access to the affected system.

Sample of the addressed vulnerabilities:

1. Ivanti Connect-Secure Buffer Over-Read Vulnerability (CVE-2025-5456):

• CVSS: 7.5
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Denial of Service

2. Ivanti Avalanche Code Execution Vulnerability (CVE-2025-8296):

• CVSS: 7.2
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Gain Access

Affected Products:

• Ivanti Connect Secure.
• Ivanti Avalanche.
• Ivanti Virtual Application Delivery Controller.