Skip to content
Threat Feed
Subscribe
medium advisory

Ivanti Xtraction Vulnerabilities CVE-2026-14902 and CVE-2026-14903

Ivanti has published a security advisory (AV26-696) on July 14, 2026, to address two vulnerabilities, CVE-2026-14902 and CVE-2026-14903, affecting Ivanti Xtraction version 2026.2 and prior, urging users to apply necessary updates to mitigate potential risks.

On July 14, 2026, Ivanti issued a security advisory (AV26-696) detailing critical vulnerabilities affecting Ivanti Xtraction, specifically version 2026.2 and all prior versions. The advisory highlights two distinct vulnerabilities, identified as CVE-2026-14902 and CVE-2026-14903, though specific details regarding their nature (e.g., type of vulnerability, exploitability) are not disclosed in the provided information. Ivanti Xtraction is a business intelligence and reporting tool used for data visualization and analysis across IT operations. The advisory strongly recommends that users and administrators review the provided web links and apply the necessary updates to their installations. Failure to patch these vulnerabilities could lead to potential compromise of affected systems, unauthorized data access, or other adverse impacts, depending on the specifics of the flaws. This advisory aims to inform customers of required actions to secure their environments.

Impact

While the specific exploitation details of CVE-2026-14902 and CVE-2026-14903 are not provided, unpatched vulnerabilities in enterprise software like Ivanti Xtraction can lead to significant consequences. Successful exploitation could result in unauthorized access to sensitive operational data, potential data exfiltration, or complete system compromise, allowing attackers to establish persistence or pivot to other systems within the network. Organizations using Ivanti Xtraction could face disruptions to their reporting capabilities, data integrity issues, and reputational damage. The broad applicability of Xtraction across various IT functions means potential impact could be widespread within an affected organization.

Recommendation

  • Review the Ivanti security advisory for CVE-2026-14902 and CVE-2026-14903 and apply all available patches to Ivanti Xtraction versions 2026.2 and prior immediately.