CVE-2026-106047PATCHED

ivanti · xtraction

CVE-2026-106047: A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a r

Description

A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.

Affected Products

Vendor	Product	Versions
ivanti	xtraction	—

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs

Related News (1 articles)

Tier C

VulDB4h ago

CVE-2026-106047 | Ivanti Xtraction up to 2026.3 Template Export path traversal

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.7 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CISA KEV❌ No

Actively exploited❌ No

Patch available

2026.4

CWECWE-22

PublishedOct 13, 2026

Last enriched4h ago

Trending Score27

Source articles1

Independent1

Info Completeness5/14

Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-104935

CVE-2026-104935: Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arb

Trending: 86

CRITICALCVE-2026-109412

CVE-2026-109412: An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitiv

Trending: 45

CRITICALCVE-2026-106042

CVE-2026-106042: An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authent

Trending: 41

HIGHCVE-2026-106043

CVE-2026-106043: A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote u

Trending: 37

MEDIUMCVE-2026-106035

CVE-2026-106035: An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a re

Trending: 23

Pin to Dashboard

Verification

State: verified

Confidence: 100%

Vulnerability Timeline

CVE Published

Oct 13, 2026

Discovered by ZDM

Oct 13, 2026

Patch Available

Oct 13, 2026