Is CVE-2026-106043 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106043?

CVE-2026-106043 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-106043

Description

A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.