{"id":"CVE-2026-106035","published":"2026-10-13T17:17:16.160","lastModified":"2026-10-14T16:08:15.347","description":"An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.","cvssScore":5.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-532"],"vendors":[],"products":[],"references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}