CVE-2026-118527
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
4.3CVSS base score · medium (NVD)
ExploitedIn CISA KEV · federal patch deadline Nov 13, 2026
What happened
CISA added two previously zero-day Ivanti Connect Secure vulnerabilities, CVE-2026-111357 and CVE-2026-118527, to its Known Exploited Vulnerabilities catalog. These flaws were exploited in chained attacks against VPN deployments. Organizations using Ivanti Connect Secure should prioritize patching these flaws and review VPN access logs for signs of compromise.
From the Intel60 brief of Nov 2, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalIvanti Connect Secure chained zero-days added to KEVNov 2, 2026
- CriticalCISA adds Ivanti Connect Secure auth bypass to KEVOct 30, 2026
- CriticalCISA adds Ivanti Connect Secure upload flaw to KEVOct 30, 2026