7.5
High
CVE-2026-106043 A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
Description
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Xtraction 2026.4 | earliest → < 2026.4 | 2026.4 |
References
- hub.ivanti.com hub.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Xtraction
The 8 CVEs of Xtraction →
CVE-2026-106047
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a…
7.7
High
CVE-2026-106042
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
9.9
Critical
CVE-2026-106035
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a…
5.5
Medium
CVE-2026-106034
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to…
5.0
Medium