{"aliases":"CVE-2026-118527\nGHSA-4hjv-6c7p-cpmq\n","cvss":4.3,"datePublished":"Nov 3, 2026, 2:53:28 PM","dateUpdated":"Nov 3, 2026, 3:32:56 PM","description":"Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.","euvdId":"EUVD-2026-115872","exploitedSince":"Oct 30, 2026, 12:00:00 AM","id":"CVE-2026-118527","kev_catalogs":["euvd"],"severity":"MEDIUM","source":"euvd_kev","title":"EUVD-2026-115872"}