CVE-2026-14903: CWE-23 Relative path traversal in ivanti Xtraction
CVE-2026-14903 is a path traversal vulnerability in Ivanti Xtraction before version 2026.2.1 that allows a remote authenticated attacker to read arbitrary files outside the web root directory. This…
Read the full article2d agoen
You might also wanna read
Ivanti Sentry Pre-Auth OS Command Injection (CVE-2026-10520) Allows Root-Level Remote Code Execution
Today, Ivanti published an advisory. “No way?” we hear you say. "Yes way!" Today’s advisory outlines two vulnerabilities in Ivanti’s Sentry
labs.watchtowr.com·27d ago
CVE-2026-48800 Bypass: Path Traversal Vulnerability Discovered in Notepad++ v8.9.6.1
## Vulnerability Summary **Product**: Notepad++ v8.9.6.1 (latest patched version) **Type**: CWE-42 (Path Traversal) / CWE-59 (Improper Link
github.com·1mo ago
WAF - WAF Release - 2026-03-12 - Emergency
This week's release introduces new detections for vulnerabilities in Ivanti Endpoint Manager Mobile (CVE-2026-1281 and CVE-2026-1340), along
Cloudflare·4mo ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.