6 entries matching ivanti — updated 2026-10-13 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-106042 | An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authent | CRITICAL | 9.9 | — | NVD | 2026-10-13 |
| CVE-2026-109412 | An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitiv | CRITICAL | 9.9 | — | NVD | 2026-10-13 |
| CVE-2026-106047 | A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a r | HIGH | 7.7 | — | NVD | 2026-10-13 |
| CVE-2026-106043 | A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote u | HIGH | 7.5 | — | NVD | 2026-10-13 |
| CVE-2026-106035 | An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a re | MEDIUM | 5.5 | — | NVD | 2026-10-13 |
| CVE-2026-106034 | A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to creat | MEDIUM | 5.0 | — | NVD | 2026-10-13 |