---
id: 7071
title: "CVE-2025-0282 and CVE-2025-0283: Critical Ivanti 0days Exploited in the Wild"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/cve-2025-0282-and-cve-2025-0283-critical-ivanti-0days-exploited-in-the-wild"
published_at: "2025-01-09T14:23:44Z"
tags: ["rce", "vulnerability", "vpn", "0day", "ivanti", "cve-2025-0282"]
phying_url: "https://phying.com/item/7071"
lang: en
---

# CVE-2025-0282 and CVE-2025-0283: Critical Ivanti 0days Exploited in the Wild

## Summary

Ivanti Connect Secure 0days CVE-2025-0282 (unauthenticated RCE via stack buffer overflow) and CVE-2025-0283 have been exploited in the wild since December 2024; urgent patching guidance inside.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2025-01-09T14:23:44Z
- **Original:** https://www.wiz.io/blog/cve-2025-0282-and-cve-2025-0283-critical-ivanti-0days-exploited-in-the-wild
- **Phying News:** https://phying.com/item/7071