CVE-2026-118527

CVSS

—

EPSS

—

CISA KEV

Added 2026-10-30, due 2026-11-13

Exploitation

No report

Public exploits

None seen

State

Unknown

Coverage

• ● Actively exploitedCritical 100CISA advisories & alerts◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards30 Oct, 12:00

  CISA Adds Two Known Exploited Vulnerabilities to Catalog

  CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-111357 Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability CVE-2026-118527 Ivanti Connect Secure Generation of Predictable…

  ↗cisa.gov/news-events/alerts/2026/10/30/cisa-add…(opens the publisher's site in a new tab)

What we observed

1. 30 Oct, 17:10kev addedcisa-kev