Posting Date: 2026/05/15
【Vulnerability Alert】High-Risk Security Vulnerability in Ivanti Xtraction (CVE-2026-8043)
- Subject: 【Vulnerability Alert】High-Risk Security Vulnerability in Ivanti Xtraction (CVE-2026-8043)
- Description:
- Forwarded from Taiwan Computer Emergency Response Team / Coordination Center Security Advisory TWCERTCC-200-202605-00000007
- Ivanti Xtraction is an IT reporting and data visualization platform that integrates data from different IT systems into a single dashboard for real-time viewing and analysis. Ivanti recently released a critical security vulnerability advisory (CVE-2026-8043, CVSS: 9.6). This vulnerability allows an authenticated attacker to read sensitive files and write arbitrary HTML files into the website directory.
- Affected Platforms:
- Ivanti Xtraction versions 2026.1 (inclusive) and earlier
- Recommended Actions:
- Please update to Ivanti Xtraction version 2026.2 (inclusive) or later
Computer and Communication Center
Network Systems Division