CVE-2026-118527
KEVKEV confirmed, active exploitation reported, vendor patches released, urgent remediation timelines posted.
What: Ivanti Connect Secure predictable number/identifier generation vulnerability affecting VPN and secure access appliances widely used by enterprises.
Why it matters: KEV-listed on 2026-10-30 with confirmed active in-the-wild exploitation. Multiple sources report CISA urgency and vendor patching underway. Ivanti Connect Secure is critical infrastructure; predictable identifiers can enable authentication bypass and session hijacking at scale.
Where it's seen: CISA KEV advisories, multilingual security feeds (French, Japanese, English), patch management platforms, and threat intelligence aggregators all flagging active exploitation and mandatory remediation deadlines (2026-11-02 to 2026-11-13).
RISK: CRITICAL — KEV-listed active exploitation of enterprise VPN appliance; predictable auth tokens enable mass compromise.
No NVD details ingested for this CVE yet.