#NØØT_Security_Alerts 🚨 #ALERT — IVANTI XTRACTION CVSS 9.9: CRITICAL FLAW EXPOSES EPMM CONNECTOR CREDENTIALS October 13, 2026 DISCLOSED BY: Ivanti Security PRODUCT: Ivanti Xtraction CVE: CVE-2026-106042 SEVERITY: CRITICAL — CVSS 9.9 WEAKNESS: CWE-73 AFFECTED VERSIONS: Ivanti Xtraction releases before 2026.4. IMPACT: An external-control-of-file-path vulnerability allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint. These requests may transmit EPMM connector credentials, exposing sensitive authentication information associated with integrated enterprise management systems. EXPOSURE: Network access and authenticated low-privileged access are required. No additional user interaction is required. This is credential exposure, NOT confirmed remote code execution. EXPLOITATION STATUS: VENDOR-CONFIRMED CRITICAL VULNERABILITY. No verified in-the-wild exploitation or working public PoC established. CISA’s October 13 vulnerability assessment records exploitation as “none” and potential technical impact as “total.” This is not a CISA KEV listing. Forensic triage: Review Xtraction outbound connections to unexpected destinations. Investigate unusual connector requests, unauthorized configuration changes and suspicious use of EPMM integration credentials. No confirmed attacker-specific IOCs have been published. URGENT ACTION: Upgrade Ivanti Xtraction to version 2026.4 or later. Restrict unnecessary authenticated access. Review connector permissions and rotate potentially exposed credentials when investigation indicates disclosure. SOURCE: https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEs OFFICIAL CVE: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/106xxx/CVE-2026-106042.json CONFIDENCE: HIGH — Ivanti-authored CVE record confirms the affected versions, credential-exposure mechanism and CVSS 9.9 severity. Real-world exploitation remains unverified. #CyberSecurity #ThreatIntel #Ivanti #CredentialSecurity #EnterpriseSecurity
