CriticalVulnerabilityOct 30, 2026

CISA adds Ivanti Connect Secure upload flaw to KEV

CISA added CVE-2026-118527 to its Known Exploited Vulnerabilities catalog. The vulnerability in Ivanti Connect Secure allows authenticated remote attackers to upload files with attacker-controlled content to known disk locations. Exploitable in chains with two other CVEs. Federal agencies must mitigate by November 13, 2026, per BOD 26-04 guidance or discontinue use.

Vulnerabilities

CVE-2026-118527 CVSS 4.3 Exploited (CISA KEV)
CVE-2026-104935 CVSS 8.6 EPSS 89% Exploited (CISA KEV)
CVE-2026-111357 CVSS 7.0 EPSS 0.5% Exploited (CISA KEV)

Source

CISA KEVRead the original article

AI-written summary. Check the original reporting before acting.