Description
Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | Connect Secure | — | 25.1.1.3 |
Advisories 1
- NCSC-2026-0416 ZeroDay kwetsbaarheden verholpen in Ivanti Connect Secure NCSC-NL (Netherlands) · Nov 3, 2026