vulnhighUnderground · Vulnerability
KEV agrega CVE-2026-118527 — Ivanti / Connect Secure
OccurredOct 30, 2026 · 00:00 UTC
DetectedOct 31, 2026 · 11:58 UTC
SourceUnderground · Vulnerability
External ref.CVE-2026-118527
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
- cve_id
- CVE-2026-118527
- vendor_product
- Ivanti / Connect Secure