CyberRota Analysis
AI-GeneratedIvanti Xtraction versions prior to 2026.2.1 contain an open redirect vulnerability that enables remote, unauthenticated attackers to redirect users to arbitrary external URLs. This could lead to phishing attacks or the distribution of malicious content, posing a risk to user security and trust. Organizations utilizing Ivanti Xtraction should prioritize applying the latest updates to mitigate this risk.
CVE
CVE-2026-14902
Severity
MEDIUM
CVSS
4
EPSS
0.43%
Ivanti
Original NVD Description
An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.
Related CVEs
Other vulnerabilities affecting the same vendor(s)