9.9
Critique
CVE-2026-106042 An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
Description
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Xtraction 2026.4 | premières → < 2026.4 | 2026.4 |
Références
- hub.ivanti.com hub.ivanti.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Xtraction
Les 8 CVE de Xtraction →
CVE-2026-106047
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a…
7.7
Élevée
CVE-2026-106043
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
7.5
Élevée
CVE-2026-106035
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a…
5.5
Moyenne
CVE-2026-106034
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to…
5.0
Moyenne