CVE-2026-18127 is a vulnerability in the Core of Ivanti Endpoint Manager before version 2024 SU7 that allows a remote authenticated attacker to control a filename externally. This flaw enables the attacker to gain full write control over an S3 bucket configured for session recording storage. The vulnerability has a high severity with a CVSS score of 7.7, indicating significant impact on integrity without affecting confidentiality or availability.