CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2026-1185274.3/MEDIUMEPSS 0.8%CISA KEV

2026-11-03

Ivanti Connect Secure Predictable Filename Vulnerability (CVE-2026-118527) - Arbitrary File Upload Risk

[Affected Scope] Ivanti Connect Secure versions prior to 25.1.1.3 and 22.8R2.6

[Impact] Authenticated attackers can upload malicious files to predictable paths, potentially leading to persistent access or further exploitation

[Mitigation] Immediate upgrade to versions 25.1.1.3, 22.8R2.6, or higher is required

CVE-2026-1049358.6/HIGHEPSS 88.9%CISA KEV

2026-10-13

[Affected Scope] Ivanti Connect Secure (ICS) versions prior to 25.1.3.0 (excluding 22.7R2.14 and earlier)

[Impact] Remote unauthenticated attackers can bypass authentication via identity spoofing and execute arbitrary commands with system privileges

[Mitigation] Immediately upgrade to version 25.1.3.0 or later and perform a comprehensive compromise assessment using official IoCs