Skip to content

CVE record · 1 source

CVE-2026-106042

CVSS 9.9

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect…

Vendor: Ivanti
Product: ivanti
CVSS: 9.9
EPSS: 0.008 (p56)
Exposure class: Mobile OS

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

29

CVE NVD 18d ago

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect…

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM…

CVSS 9.9 CVE-2026-106042 Ivanti