CVE-2026-14903
Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web r
CVSS
7.7
Alto
EPSS
1.0%
p60
KEV
—
Exploit Today
18
0-100
Publicado: 14 jul 2026 · Última mod.: 15 jul 2026 · CWE-23
1.0%EPSS · 30 días1.0%
2026-07-152026-07-16
Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-561968.8 ALT57.4%
——17Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.2dCVE-2026-613437.2 ALT53.7%
——16LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0.8dCVE-2026-506638.8 ALT47.0%
——14Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network.2dCVE-2025-667374.3 MED45.1%
——14Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbitrary files via a crafted request result read function of the diagnostic component.12dCVE-2026-257078.8 ALT44.7%
——13A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation.17dCVE-2026-274897.5 ALT44.4%
——13Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, a path traversal vulnerability via symlink allows to read arbitrary files outside model or user-provided directory. This issue has been patched in version 1.21.0.2d