CVE-2026-14902
MEDIUM
MEDIUM
Priority: 0.04
BB Relevance:
62/100
Published: 2026-07-14
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Auth
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
Required
S:
Changed
C:
Low
I:
Low
A:
None
Description
An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.
Weakness Classification (1)
References & Advisories (1)
Vendor Advisory