grep -rl "CVE-2026-118527" ./articles
CISA added two more Ivanti Connect Secure flaws on 30 October. Ivanti's advisory says the exploitation it saw used all three chained, and the versions it shipped in October as the fix are listed as affected by the new pair.
Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.
CISA added this identifier to its Known Exploited Vulnerabilities catalog on 2026-10-30, which means the agency has evidence of exploitation rather than a judgement that exploitation is possible. US federal agencies were required to remediate it by 2026-11-13.
CISA added two more Ivanti Connect Secure flaws on 30 October. Ivanti's advisory says the exploitation it saw used all three chained, and the versions it shipped in October as the fix are listed as affected by the new pair.
../cve — every identifier we have covered