CVE-2026-106042: CWE-73 External control of file name or path in Ivanti Xtraction
Description
CVE-2026-106042 is a critical vulnerability in Ivanti Xtraction before version 2026.4 involving external control of file name or path. It allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint. This redirection can lead to the attacker obtaining EPMM connector credentials transmitted by the application.
CVSS v3.1
Score 9.9critical
Affected software
Ivanti
Xtraction
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-73) in Ivanti Xtraction prior to version 2026.4 enables a remote authenticated attacker to manipulate file name or path parameters used by the application. By exploiting this, the attacker can redirect requests generated by the application to endpoints under their control, thereby intercepting sensitive credentials related to the EPMM connector. The CVSS 3.1 score is 9.9, indicating critical severity with network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation allows an attacker with authentication privileges to redirect application requests and capture sensitive EPMM connector credentials. This compromises confidentiality and integrity of the credentials and potentially the connected systems relying on them. The vulnerability has a critical impact on the affected system's security posture.
Mitigation Recommendations
A fix is available in Ivanti Xtraction version 2026.4. Users should upgrade to version 2026.4 or later to remediate this vulnerability. No additional mitigation recommendations are provided in the available data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- ivanti
- Date Reserved
- 2026-10-06T13:55:15.150Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ace5a0a2cdf04f65685c30e
Added to database: 10/13/2026, 16:19:22 UTC
Last enriched: 10/13/2026, 16:33:22 UTC
Last updated: 10/13/2026, 16:34:34 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.