· zachyceno
EPSS 0.01 (nejvyšší)
Security Advisory Ivanti Xtraction (Multiple CVEs)
Classification: Critical, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.9, CVEs: CVE-2026-106034, CVE-2026-106035, CVE-2026-106042, CVE-2026-106043, CVE-2026-106047, Summary: CVE-2026-106034:A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system. CVE-2026-106035: An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before…
Ivanti FI
CVE v události 5
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-106034 | 5.0 3.1 · ivanti | – | 0.00 |
| CVE-2026-106035 | 5.5 3.1 · ivanti | – | 0.00 |
| CVE-2026-106042 | 9.9 3.1 · ivanti | – | 0.01 |
| CVE-2026-106043 | 7.5 3.1 · ivanti | – | 0.01 |
| CVE-2026-106047 | 7.7 3.1 · ivanti | – | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.9.