Known Exploited Vulnerabilities October 30, 2026 · CISA KEV Catalog

CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-118527 Ivanti
Related: CISA Adds Two Known Exploited Vulnerabilities to Catalog Cyber Risks · Oct 30, 2026
CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Oct 30, 2026
CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability Known Exploited Vulnerabilities · Oct 13, 2026