CVE-2026-118527Ivanti Connect Secure

Generation of Predictable Numbers or Identifiers Vulnerability

Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 30 Oct 2026.

Chance of exploitation in 30 daysEPSS

0.82%

0%Higher than 57% of all CVEs

Exploited in the wild: YesPer CISA, listed 30 Oct 2026
Severity: 4.3 of 10Medium, CVSS
Used in ransomware: Not known
US federal deadline: 13 Nov 2026Agencies must fix it by then

Fix it in one click

Fix it in your code

Claude Code Codex Cursor Claude Code (web)

Explain it to me

Claude ChatGPT

Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2026-118527. Nothing runs until you send it.

About this flaw

Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.

Published: 3 Nov 2026
Weakness: CWE-340