cve-2026-118527
MEDIUM CVSS 4.3 euvd_kev
Description
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.
Timeline
- Published
- Nov 3, 2026, 2:53:28 PM
- Last Modified
- Nov 3, 2026, 3:32:56 PM
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"aliases": "CVE-2026-118527\nGHSA-4hjv-6c7p-cpmq\n",
"cvss": 4.3,
"datePublished": "Nov 3, 2026, 2:53:28 PM",
"dateUpdated": "Nov 3, 2026, 3:32:56 PM",
"description": "Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.",
"euvdId": "EUVD-2026-115872",
"exploitedSince": "Oct 30, 2026, 12:00:00 AM",
"id": "CVE-2026-118527",
"kev_catalogs": [
"euvd"
],
"severity": "MEDIUM",
"source": "euvd_kev",
"title": "EUVD-2026-115872"
}