Ivanti
Generation of Predictable Numbers or Identifiers Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 30 Oct 2026.
CVE-2026-118527Medium4.3
Chance of exploitation in the next 30 days
0.82%
EPSS score from FIRST
Black Shard's team can check your exposure to CVE-2026-118527 and take the fix off your plate.
Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357.
Updated 13 Nov 2026, 12:02 UTC, 30 of 36 sources answering.
Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.