CVE-2026-14903

Ivanti Xtraction versions prior to 2026.2.1 are vulnerable to a path traversal flaw that enables remote authenticated attackers to access and read arbitrary files outside the web root. This vulnerability poses a significant risk of data exposure, making it critical for organizations using affected versions to prioritize immediate patching. Users of Ivanti Xtraction should assess their systems and implement the necessary updates to mitigate potential data breaches.