【Vulnerability Alert】Ivanti Xtraction has a high-risk security vulnerability (CVE-2026-106042)

• Subject: 【Vulnerability Alert】Ivanti Xtraction has a high-risk security vulnerability (CVE-2026-106042)

• Description:
  • Forwarding TWCERTCC Security Information Advisory TWCERTCC-200-202610-00000015
  • Ivanti's Xtraction is an IT reporting and data visualization platform that integrates data from different IT systems into a single dashboard for real-time viewing and analysis. Ivanti recently released a critical security vulnerability advisory (CVE-2026-106042, CVSS: 9.9). This vulnerability allows an authenticated attacker to redirect requests generated by the application to an attacker-controlled endpoint and obtain the EPMM connector credentials transmitted by the application.
• Affected Platforms:
  • Ivanti Xtraction versions 2026.2.1 (inclusive) and earlier
• Recommended Actions:
  • Please update to Ivanti Xtraction version 2026.4 (inclusive) or later
• References:
  • 1 https://www.twcert.org.tw/tw/cp-169-11279-6c31b-1.html

Computer and Communication Center
Network System Division