Ivanti · Connect Secure
Updated November 6, 2026
Ivanti Connect Secure generates predictable IDs for uploaded files, enabling a remote authenticated attacker to place arbitrary content on the filesystem. The flaw can be chained with other Ivanti bugs to achieve full compromise.
Attackers can plant web shells or malicious binaries, paving the way for lateral movement and privilege escalation within the protected network.
Upgrade to the latest Connect Secure release that randomizes identifiers; enforce strict file‑upload validation and monitor for unexpected files in the upload directory.
More active vulnerabilities