CVE-2026-106047

Description

A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98909

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3