Login Request a demo
XT
Product
Xtraction
by ivanti · last CVE Oct 13, 2026
8
CVEs
0
On KEV
9.9
Max CVSS
5
New 30D
Vulnerabilities8In the news1Timeline
Severity mix
Critical 2High 2Medium 4Low 0
Severity
All severities8Critical2High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Xtraction to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-106042
9.9
1%
Oct 13
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests…
Affected: All versions, or not specified
CVE-2026-8043
9.6
1%
May 12
External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web…
Affected: before 2026.2
Showing 2