CVE-2026-14902

CVSS Score & Metrics

Base Score

4.0 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N                                    

An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.

Published Date

July 14, 2026

Last Modified

July 14, 2026

CWE ID

CWE-601

Source

NVD

Vendor

ivanti

Product

Xtraction