Ivanti Connect Secure X Forwarded For Overflow Cve 2025 22457

Tim Peck@timpeck

•updated Aug 19, 2025•1•0•21

Detects potential exploitation attempts against Ivanti Connect Secure devices for vulnerability CVE-2025-22457. This vulnerability is actively exploited in the wild. Attackers can send an abnormally long string composed of digits and periods in the 'X-Forwarded-For' HTTP header to trigger a stack-based buffer overflow, which can lead to remote code execution.