{"vulnerability": "cve-2026-14902", "sightings": [{"uuid": "f75e6bfc-c425-474c-a8e9-5b67a6ceaf50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-21T23:00:08.854828Z"}, {"uuid": "d4342b6f-46ce-428f-bc40-b35da850af44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-22T00:00:12.338336Z"}, {"uuid": "55569d9b-43fd-4696-9c80-8a62e0f002e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmkl6x6la25", "content": "CVE-2026-14902 - Ivanti Xtraction Open Redirect Vulnerability\nCVE ID : CVE-2026-14902\n \n Published : July 14, 2026, 3:16 p.m. | 13\u00a0minutes ago\n \n Description : An open redirect in Ivanti\u00a0Xtraction\u00a0before\u00a0version\u00a02026.2.1\u00a0allows a remote\u00a0unauthenticated attacker to redirect use...", "creation_timestamp": "2026-07-14T15:48:11.605171Z"}, {"uuid": "11416113-9265-4ab0-95a6-6b5053d153a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-696", "content": "", "creation_timestamp": "2026-07-14T21:19:53.864484Z"}, {"uuid": "b0090069-4a30-461c-a560-423b217645a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-23T00:00:44.061595Z"}, {"uuid": "a2c5a74f-f635-476a-b6f2-9d0bf2a47a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14902", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupvh3fjbs2b", "content": "\u30c7\u30fc\u30bf\u5206\u6790\u53ef\u8996\u5316\u88fd\u54c1\u300cIvanti Xtraction\u300d\u306b\u8907\u6570\u8106\u5f31\u6027\n\nIvanti\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670814\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u30c7\u30fc\u30bf\u5206\u6790\u53ef\u8996\u5316\u88fd\u54c1\u300cIvanti Xtraction\u300d\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u5404\u793e\u304c\u5b9a\u4f8b\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3059\u308b\u7c73\u6642\u9593\u6bce\u6708\u7b2c2\u706b\u66dc\u65e5\u3001\u3044\u308f\u3086\u308b\u300c\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc\u300d\u306b\u3042\u308f\u305b\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-14902\u300d\u300cCVE-2026-14903\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-14903\u300d\u306f\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u8106\u5f31\u6027\u3002\u60aa\u7528\u306b\u306f\u4f4e\u3044\u6a29\u9650\u304c\u5fc5\u8981\u3068\u306a\u308b\u304c\u3001\u30a6\u30a7\u30d6\u30eb\u30fc\u30c8\u5916\u306b\u5b58\u5728\u3059\u308b\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6...", "creation_timestamp": "2026-09-04T21:21:31.033543Z"}]}