CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-03
Ivanti Connect Secure Predictable Filename Vulnerability (CVE-2026-118527) - Arbitrary File Upload Risk
[Affected Scope] Ivanti Connect Secure versions prior to 25.1.1.3 and 22.8R2.6
[Impact] Authenticated attackers can upload malicious files to predictable paths, potentially leading to persistent access or further exploitation
[Mitigation] Immediate upgrade to versions 25.1.1.3, 22.8R2.6, or higher is required