5137 matches found
CVE-2026-106047
Ivanti Xtraction versions prior to 2026.4 are vulnerable to a Path Traversal vulnerability within the template export functionality . This flaw allows a remote authenticated attacker to perform arbitrary file reads. The documents do not provide specific details regarding exploit availability or d...
CVE-2026-106043
Ivanti Xtraction versions before 2026.4 are affected by a Missing Authentication for Critical Function vulnerability (CWE-306). This flaw allows a remote unauthenticated attacker to create or modify trusted sites . While the documents do not provide specific remediation steps or exploit links, th...
CVE-2026-106042
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application...
CVE-2026-106042
Ivanti Xtraction versions before 2026.4 are affected by an External Control of File Name or Path vulnerability (CWE-73). This flaw allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint. Successful exploitation enables the attacker to ...
CVE-2026-106035
The Ivanti Xtraction Cloud Sync software before version 2026.4 is vulnerable to an Information Exposure Through Log Files (CWE-532) vulnerability. A remote authenticated attacker can exploit this to disclose partial SQL database passwords via the application logs. No specific remediation or explo...
CVE-2026-106034
A Path Traversal vulnerability exists in Ivanti Xtraction before version 2026.4 . This flaw allows a remote authenticated attacker to create or modify arbitrary directories on the host file system. The vulnerability is categorized under CWE-22: Improper Limitation of a Pathname to a Restricted Di...
Security Advisory Ivanti Xtraction (Multiple CVEs)
Last Modified Date Oct 13, 2026 4:20:50 PM...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability These types o...
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, whi...
PT-2026-111673
Name of the Vulnerable Software and Affected Versions Ivanti Xtraction versions prior to 2026.4 Description An External Control of File Name or Path issue allows a remote authenticated attacker to redirect application-generated requests to an endpoint under their control. This can lead to the the...
CVE-2026-106047: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files...
CVE-2026-106035: Insertion of Sensitive Information into Log File
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log...
CVE-2026-106042: External Control of File Name or Path
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application...
CVE-2026-106034: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system...
CVE-2026-109412: Exposed Dangerous Method or Function
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information...
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands...
PT-2026-111656
Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions 25.1.1.1 through 25.1.1.1 Ivanti Connect Secure versions 25.1.2.2 through 25.1.2.2 Ivanti Connect Secure versions 22.8R2.4 through 22.8R2.4 Description An authentication bypass by spoofing allows a remote...
VulnCheck KEV: CVE-2026-104935
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands...
CVE-2026-106043: Missing Authentication for Critical Function
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site...
PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intelligence AI and large language model LLM infrastructure with an aim to deploy cryptocurrency miners and further expand the scale of the botnet. The financially motivated...