CVE-2026-118527

Vendor

Ivanti

Product

Connect Secure

EPSS

0.87 (p100)

CISA KEV

added 30 Oct 2026, due 13 Nov 2026 (12d)

Weakness

CWE-340

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 91
   KEV CISA KEV 2d ago

   Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

   Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This…

   KEV · due 13 Nov 2026 Fix available CVE-2026-118527 Ivanti
2. 85
   CISA alert CISA 18d ago

   CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure

   Update October 30, 2026 : CISA has updated this Alert to: (1) include CVE-2026-111357 and CVE-2026-118527 and reflect their addition to the Known Exploited Vulnerabilities (KEV) Catalog on October 30, 2026; and (2) update the…

   Exploited EPSS 0.87 Fix available CVE-2026-111357CVE-2026-118527CVE-2026-104935 Ivanti
3. 71
   CISA alert CISA 43h ago

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function…

   Exploited CVE-2026-111357CVE-2026-118527 Ivanti
4. 37
   CCCS advisory CCCS 15d ago

   Ivanti security advisory (AV26-1035)

   EPSS 0.87 CVE-2026-104935CVE-2026-111357CVE-2026-118527+1 more Ivanti