VULNERABILITY INTELLIGENCE

CVE-2026-14903

CVSS score7.7 HIGH

EPSS probability1.18%

CISA KEVNot currently listed

Published2026-07-14

Last modified2026-10-24

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Description

Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root.