Path Traversal Vulnerability in Ivanti Xtraction Product
CVE-2026-106034

5MEDIUM

Key Information:

Vendor

Ivanti
Status
Xtraction
Vendor
CVE Published:
13 October 2026

What is CVE-2026-106034?

A Path Traversal vulnerability exists in Ivanti Xtraction prior to version 2026.4. This flaw allows a remote authenticated attacker to manipulate directory paths, resulting in the potential creation and modification of arbitrary directories on the host file system. Such actions could compromise system integrity and lead to unauthorized access to sensitive data.

Affected Version(s)

Xtraction 2026.4

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti...

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.