Medium severity4.3NVD Advisory· Published Nov 3, 2026· Updated Nov 3, 2026
CVE-2026-118527
CVE-2026-118527
Description
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <25.1.1.3, <22.8R2.6
Patches
Vulnerability mechanics
References
2News mentions
5- CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)Help Net Security · Nov 2, 2026
- Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack ChainSecurityWeek · Nov 2, 2026
- Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root AccessThe Hacker News · Oct 31, 2026
- Ivanti Connect Secure 0-Days Exploited in the Wild to Gain Unauthenticated Root AccessCyber Security News · Oct 30, 2026
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts