CVE-2026-8043 | BDVDB-2026-332321 Detail
ivantiXtraction
Description#
External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web directory, leading to information disclosure and possible client-side attacks.
Impact#
CAPEC-165 File Manipulation
Weaknesses#
- CWE-73 External control of file name or path
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.