High7.7Ivanti

Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outsi…

CVE-2026-14903 Published Jul 14, 2026Updated by vendor Jul 14, 2026

CVE-2026-14903

Affected products & platforms

IvantiUnclassified

Summary

Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root.

Fixed versions

2026.2.1

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Mitigation

Mitigation steps weren't captured by the parser for this advisory — this is a parsing gap, not a statement that no fix exists. Read the vendor advisory below for the authoritative guidance.

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

High7.7Ivanti

Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outsi…

CVE-2026-14903 Published Jul 14, 2026Updated by vendor Jul 14, 2026

CVE-2026-14903

Affected products & platforms

IvantiUnclassified

Open vendor advisory

Summary

Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root.

Fixed versions

2026.2.1

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Mitigation

Mitigation steps weren't captured by the parser for this advisory — this is a parsing gap, not a statement that no fix exists. Read the vendor advisory below for the authoritative guidance.

Official advisory · high-confidence parse· fetched 2 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.