{
  "aliases": "CVE-2026-118527\nGHSA-4hjv-6c7p-cpmq\n",
  "cvss": 4.3,
  "datePublished": "Nov 3, 2026, 2:53:28 PM",
  "dateUpdated": "Nov 3, 2026, 3:32:56 PM",
  "description": "Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.",
  "euvdId": "EUVD-2026-115872",
  "exploitedSince": "Oct 30, 2026, 12:00:00 AM",
  "id": "CVE-2026-118527",
  "kev_catalogs": [
    "euvd"
  ],
  "severity": "MEDIUM",
  "source": "euvd_kev",
  "title": "EUVD-2026-115872"
}