MEDIUMCVSS 4.31% EPSSKEV — known exploited🧨 Public exploit (GreyNoise)
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.
Published 2026-11-03 · last modified 2026-11-03
| Vendor | Product |
|---|---|
| ivanti | connect_secure |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.