On 8th January 2025, technology company Ivanti disclosed two critical vulnerabilities, CVE-2025-0282 and CVE-2025-0283 , affecting their Connect Secure VPN appliances. The more severe of the two, CVE-2025-0282, is a vulnerability that allows for unauthenticated remote code execution. This vulnerability has been actively exploited since mid-December 2024, leading to potential network compromises.