{"id":"CVE-2026-118527","url":"https://compromised.live/t/CVE-2026-118527","kind":"exploited_vuln","tier":1,"severity":"high","title":"Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability","summary":"A remote attacker with a valid login can upload files with content they choose to a predictable spot on the disk, and attackers are actively exploiting this flaw. It can also be chained with two other flaws. Ivanti Connect Secure. Apply the vendor's update now and check for signs of compromise, such as unexpected uploaded files on the appliance.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-30","due_date":"2026-11-13","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.","aliases":["CVE-2026-118527"],"sources":[{"name":"kev","id":"CVE-2026-118527","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118527"}]}