IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.7Hoch

CVE-2026-106047

Ivanti Xtraction Veröffentlicht: (vor 21 Tagen)

Beschreibung

A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.

Schwachstellentyp (CWE): CWE-22

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Ivanti Xtraction fixed 2026.4

Referenzen und Patches

Neue CVEs im selben Produkt — Ivanti (Connect Secure, EPMM…)

9.9Kritisch
CVE-2026-109412
Ivanti Neurons Patch for Intune

An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.

7.5Hoch
CVE-2026-106043
Ivanti Xtraction

A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.

9.9Kritisch
CVE-2026-106042
Ivanti Xtraction

An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmi…

5.5Mittel
CVE-2026-106035
Ivanti Xtraction

An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.