Vulnerability Details CVE-2026-118527
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.
Exploit prediction scoring system (EPSS) score
CVSS Severity
CVSS v3 Score 4.3
Proposed Action
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
Ransomware Campaign
Unknown
References
Products affected by CVE-2026-118527
-
cpe:2.3:a:ivanti:connect_secure:22.8
-
cpe:2.3:a:ivanti:connect_secure:25.1.0.0
-
cpe:2.3:a:ivanti:connect_secure:25.1.0.1
-
cpe:2.3:a:ivanti:connect_secure:25.1.1.0
-
cpe:2.3:a:ivanti:connect_secure:25.1.1.1
-
cpe:2.3:a:ivanti:connect_secure:25.1.1.2