CVE-2026-118527

Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Connect Secure

Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.

3. Nov 2026

Ausgewertete Quellen

• Hersteller
  https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-118527
• CISA
  Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
• NVD
  CVE-2026-118527