CVE-2026-106047Vulnerability
Reported by 2 independent sources · first reported by Dark Web Informer · last reported
Last reported 10 days ago
EPSS0.7%
higher than 53% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 53% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
2 reports, newest first · the exact sentence from each-
Multiples vulnérabilités dans les produits Ivanti (14 octobre 2026)“Référence CVE CVE-2026-106047”
-
Ivanti Patches Actively Exploited Connect Secure Zero-Day and Critical Credential-Leak Flaws“• CVE-2026-106047 allows authenticated users to read arbitrary files through path traversal.”
Indicators reported together
named in the same reports- 25.1.2[.]2in 1 report
- 25.1.1[.]1in 1 report
- 25.1.1[.]2in 1 report
- 25.1.3[.]1in 1 report
- hxxps://www.ivanti[.]com/blog/october-2026-security-updatein 1 report
- hxxps://forums.ivanti[.]com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935in 1 report
- hxxps://forums.ivanti[.]com/s/article/Security-Advisory-Ivanti-Neurons-Patch-for-Intune-October-2026in 1 report
- hxxps://forums.ivanti[.]com/s/article/Security-Advisory-Ivanti-Xtraction-Multiple-CVEsin 1 report
Copy these 8 indicators · defanged
Also named with it: CVE-2026-104935, CVE-2026-109412, CVE-2026-106042, CVE-2026-106043, CVE-2026-106034, CVE-2026-106035
Thanks — we review every report.