{"id":"CVE-2026-106042","published":"2026-10-13T17:17:16.273","lastModified":"2026-10-14T16:08:15.347","description":"An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-73"],"vendors":[],"products":[],"references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An external control of file name or path vulnerability in Ivanti Xtraction allows authenticated attackers to redirect application requests and steal EPMM connector credentials, potentially leading to unauthorized access to connected systems.","exploitability":"Exploitation requires an authenticated user with access to the application, but is relatively straightforward once achieved as it involves crafting malicious paths that redirect requests to attacker-controlled endpoints.","blast_radius":"If exploited, this vulnerability could allow attackers to gain access to EPMM connector credentials and potentially compromise all systems connected through those connectors, affecting a wide range of enterprise environments.","remediation":"Upgrade to version 2026.4 or later to address the external control of file name or path vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["file-path","credential-exfiltration","remote-auth"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:45:32.950Z"}}