| CVE-2026-106047 |
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a…
|
7.7
High
|
Oct 13, 2026 |
| CVE-2026-106043 |
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
|
7.5
High
|
Oct 13, 2026 |
| CVE-2026-106042 |
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
|
9.9
Critical
|
Oct 13, 2026 |
| CVE-2026-106035 |
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a…
|
5.5
Medium
|
Oct 13, 2026 |
| CVE-2026-106034 |
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to…
|
5.0
Medium
|
Oct 13, 2026 |
| CVE-2026-14903 |
Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary…
|
7.7
High
|
Jul 14, 2026 |
| CVE-2026-14902 |
An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect…
|
4.0
Medium
|
Jul 14, 2026 |
| CVE-2026-8043 |
External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read…
|
9.6
Critical
|
May 12, 2026 |