CVE-2026-14903

Name of the Vulnerable Software and Affected Versions Ivanti Xtraction versions prior to 2026.2.1

Description A path traversal issue allows a remote authenticated attacker to read arbitrary files located outside the web root. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.

Recommendations Update to version 2026.2.1.