CVE-2026-118527 — Ivanti Connect Secure vulnerability being actively exploited

78/100

CVE-2026-118527 in Ivanti Connect Secure allows a remote authenticated attacker to upload arbitrary files. This flaw is listed in the CISA KEV catalogue and can be chained with other vulnerabilities.

• Actively exploited (CISA KEV, added 2026-10-30)
• Ivanti
• CWE-340

Digest of 2026-10-31

Sources

• CISA — Known Exploited Vulnerabilities — CISA KEV — Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability (CVE-2026-118527)