CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
1 advisories matched
CVE-2026-1185274.3/MEDIUMEPSS 94.0%CISA KEV
2026-11-03

Ivanti Connect Secure Predictable Filename Vulnerability (CVE-2026-118527) - Arbitrary File Upload Risk

[Affected Scope] Ivanti Connect Secure versions prior to 25.1.1.3 and 22.8R2.6

[Impact] Authenticated attackers can upload malicious files to predictable paths, potentially leading to persistent access or further exploitation

[Mitigation] Immediate upgrade to versions 25.1.1.3, 22.8R2.6, or higher is required