PerimeterClock

Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.

CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability

Vendor: Ivanti
Product: Connect Secure

Summary

Ivanti Connect Secure is affected by a vulnerability that lets a remote authenticated attacker upload files with attacker-controlled content to a known location on disk. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2026-10-30.

Automated summary, checked against CISA and vendor descriptions; not yet reviewed by an analyst.

Timeline

Date Event Source
2026-10-30 Added to CISA KEV (confirmed exploitation) CISA KEV

References

Affected and fixed versions: see the vendor advisory or NVD entry below.