Description
An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ivanti | Xtraction | — | 2026.2.1 |
Medium · 4.0
CVE-2026-14902
EUVD-2026-43682GHSA-8qwq-c4m2-h4xh
An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary extern…
Published Jul 14, 2026 · Updated Jul 14, 2026 · Assigned by ivanti