← All advisories

Medium severity4.0NVD Advisory· Published Jul 14, 2026· Updated Aug 6, 2026

CVE-2026-14902

CVE-2026-14902

Description

An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.

Affected products

2

Ivanti/Xtraction2 versions
cpe:2.3:a:ivanti:xtraction:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ivanti:xtraction:*:*:*:*:*:*:*:*range: <2026.2.1
- (no CPE)range: <2026.2.1

Patches

Vulnerability mechanics

References

1

hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14902-CVE-2026-14903nvdVendor Advisory

News mentions

0

No linked articles in our index yet.