CVE-2026-118527 2

Vulnerability (CVE)

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Cyber Risks CISA Advisories Oct 30, 2026

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-118527 Ivanti...

Vulnerabilities & Patching

CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 30, 2026

Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with...

Vulnerabilities & Patching