CISA has added CVE-2025-22457, an Ivanti Connect Secure vulnerability, to its Known Exploited Vulnerabilities Catalog due to active exploitation. This stack-based buffer overflow vulnerability in Ivanti Connect Secure, Policy Secure, and ZTA Gateways poses a significant risk. CISA urges organizations to apply mitigations, conduct hunt activities, and apply updates to remediate the vulnerability. Organizations should report any related incidents to CISA's 24/7 Operations Center, providing detailed information about the incident. Binding Operational Directive 22-01 mandates Federal Civilian Executive Branch agencies to remediate cataloged vulnerabilities. The Known Exploited Vulnerabilities Catalog is a dynamic list of CVEs posing substantial risks. While BOD 22-01 is specific to FCEB agencies, CISA strongly advises all organizations to prioritize timely remediation of catalog vulnerabilities. CISA will continue to add vulnerabilities meeting specific criteria to the catalog.