IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
5.5Mittel

CVE-2026-106035

Ivanti Xtraction Veröffentlicht: (vor 1 Monat)

Beschreibung

An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.

Schwachstellentyp (CWE): CWE-532

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Ivanti Xtraction fixed 2026.4

Referenzen und Patches

Neue CVEs im selben Produkt — Ivanti (Connect Secure, EPMM…)

4.9Mittel
CVE-2026-83528
Ivanti Endpoint Manager Mobile

Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak GDPR protected user information.

5.5Mittel
CVE-2026-107405
Ivanti Endpoint Manager Mobile

An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authenticated attacker to trigger a denial of service.

4.9Mittel
CVE-2026-107404
Ivanti Endpoint Manager Mobile

Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to delete arbitrary files on disk.

4.9Mittel
CVE-2026-105427
Ivanti Endpoint Manager Mobile

Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to permanently disable all Apache HTTPS services resulting in denial of service.

6.7Mittel
CVE-2026-105426
Ivanti Endpoint Manager Mobile

Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.

5.5Mittel
CVE-2026-123181
Ivanti Sentry

A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges.