Vulnerability Bulletins |
CVE-2026-118527 |
|
| Affected software | IVANTI |
| Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-118527 | |