Vulnerability Bulletins

CVE-2026-14902

   
Affected software IVANTI
 
An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-14902