{"revision":"a6a8b450937a4e3b932281c1daa738ea","evidence":{"cve":"CVE-2026-118527","kev":{"cve":"CVE-2026-118527","product":"Connect Secure","name":"Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability","dateAdded":"2026-10-30","dueDate":"2026-11-13","knownRansomwareUse":false,"shortDescription":"Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.","vendor":"Ivanti","isMicrosoft":false,"products":[],"advisoryUrl":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118527","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-118527"},"epss":null,"observedAt":"2026-10-30T17:47:19.2047395+00:00","kevRetained":false,"reviewIdentity":"bb70b49ad75816a7dae4cc5e"}}