CVE-2026-118527
Reserved, not yet published.
The CVE Program has reserved this id, but its record is not published yet. A reserved id has no public description, affected versions or severity, so NVD has nothing for it either. This often means the issue is not yet fixed.
CVE Program status checked 2026-11-02T12:47Z. This page is replaced by our full CVE page as soon as NVD publishes the record (NVD entry).
Reported in
- CISA Adds Two Known Exploited Vulnerabilities to Catalog
- https://www.cisa.gov/news-events/alerts/2026/10/29/cisa-adds-two-known-exploited-vulnerabilities-catalog
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-118527
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-111357
- https://www.helpnetsecurity.com/2026/11/02/cisa-to-federal-agencies-remediate-exploited-ivanti-connect-secure-vulnerabilities-cve-2026-111357-cve-2026-118527/
- KEV: CVE-2026-48356 — Adobe Commerce and Magento (Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability)
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-48356
- https://www.cisa.gov/news-events/alerts/2026/10/27/cisa-adds-two-known-exploited-vulnerabilities-catalog
- https://thehackernews.com/2026/10/cisa-adds-actively-exploited-gitlab-rce.html
- https://www.securityweek.com/max-severity-gitlab-vulnerability-exploited-against-alpine-linux/
- https://www.cisa.gov/news-events/alerts/2026/10/30/cisa-adds-two-known-exploited-vulnerabilities-catalog