CVE-2025-4428

Exploited in the Wild ✓ Confirmed 0-Day
Triaged: March 5, 2026 9 articles
VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
38.31%
probability
This CVE has a 38.31% probability of being exploited in the next 30 days.
0% Top 97.3th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

Exploits & PoC

xie-22/CVE-2025-4428

Ivanti EPMM Pre-Auth RCE Chain

4
1 repo — triés par ⭐ Rechercher sur GitHub ↗

Signal Intelligence

Confidenceⓘ
85%
EPSS 38.31%
Mentions 9
Last Seen Dec 17, 2025

CNA Information

Analyst Note

CVE-2025-4428 is explicitly named as a zero-day in the BleepingComputer article 'Ivanti fixes EPMM zero-days chained in code execution attacks' and referenced in CERT-EU and CERT-FR security advisories on zero-day vulnerabilities in Ivanti EPMM. The CVE was published 2025-05-13 with concurrent exploitation reports and active malware kit deployments documented by CISA, meeting the zero-day criteria of wild exploitation concurrent with or preceding patch availability.

Threat Actors 29

Lazarus Group
apt_group Information theft and espionage 🇰🇵 KP
APT27
apt_group Information theft and espionage 🇨🇳 CN
Cobalt
apt_group Financial crime 🇷🇺 RU
Hacking Team
apt_group 🇮🇹 IT
SCATTERED SPIDER
apt_group Financial crime 🇺🇸 US
The Shadow Brokers
apt_group 🇷🇺 RU
Infy
apt_group Information theft and espionage 🇮🇷 IR
Group 27
apt_group Information theft and espionage 🇨🇳 CN
APT-C-36
apt_group Information theft and espionage 🇨🇴 CO
Comment Crew
apt_group Information theft and espionage 🇨🇳 CN
FASTCash
apt_group Information theft and espionage 🇰🇵 KP
[Unnamed group]
apt_group 🇨🇳 CN
Silent Lynx
apt_group Information theft and espionage 🇰🇿 KZ
TraderTraitor
apt_group 🇰🇵 KP
UTA0178
apt_group Information theft and espionage 🇨🇳 CN
Returned Libra
apt_group 🇨🇳 CN
APT 22
apt_group Information theft and espionage 🇨🇳 CN
APT 6
apt_group Information theft and espionage 🇨🇳 CN
Bitwise Spider
apt_group Financial gain 🇷🇺 RU
LapDogs
apt_group 🇨🇳 CN
Pat Bear
apt_group 🇸🇾 SY
Unnamed Actor
apt_group 🇨🇳 CN
Shadow Network
apt_group Information theft and espionage 🇨🇳 CN
SINGING SPIDER
apt_group 🇺🇸 US
Mana Team
apt_group 🇨🇳 CN
MIMIC SPIDER
apt_group 🇺🇸 US
APT 5
apt_group Information theft and espionage 🇨🇳 CN
Cyber Alliance
apt_group 🇺🇦 UA
Beijing Group
apt_group Information theft and espionage 🇨🇳 CN

Triage Info

Decided atMar 05, 2026