{"vulnerability": "cve-2026-14903", "sightings": [{"uuid": "294532cb-1cbf-46c4-8596-eb09c6d0f6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-21T23:00:09.159974Z"}, {"uuid": "e2fd0619-dac2-4ea0-9c63-5c7dfbca64c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-22T00:00:12.668405Z"}, {"uuid": "57570284-25f9-4f1e-94f5-31b1b973f126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmkoeal2u2x", "content": "CVE-2026-14903 - Ivanti Xtraction Path Traversal Vulnerability\nCVE ID : CVE-2026-14903\n \n Published : July 14, 2026, 3:16 p.m. | 13\u00a0minutes ago\n \n Description : Path traversal in\u00a0Ivanti\u00a0\u00a0Xtraction\u00a0before\u00a0version\u00a02026.2.1\u00a0allows a remote authenticated attacker to read arbitrary...", "creation_timestamp": "2026-07-14T15:49:58.052939Z"}, {"uuid": "d95cf53d-49f3-4727-b151-e9a93f69c57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-696", "content": "", "creation_timestamp": "2026-07-14T21:19:56.090413Z"}, {"uuid": "b42e9b69-55c0-4a91-92df-d101de5093ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://t.me/pphm_HackerNews/2067", "content": "\ud83d\udd34 Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow\n\nFortinet, Ivanti, and ServiceNow on Tuesday rolled out patches for 15 vulnerabilities across their products.\n\nServiceNow resolved a critical remote code execution (RCE) flaw in the ServiceNow AI platform that can be exploited without authentication. The bug is tracked as CVE-2026-6875 (CVSS score of 9.5).\n\n\u201cServiceNow addressed this vulnerability by deploying a security update to hosted instances. Relevant security updates have also been provided to ServiceNow self-hosted customers and partners,\u201d the company said.\n\nIvanti released fixes for two security defects in its data aggregation and visualization tool Xtraction, tracked as CVE-2026-14902 and CVE-2026-14903.", "creation_timestamp": "2026-08-23T00:00:43.986144Z"}, {"uuid": "827558c8-df8a-4a37-bd4c-ee2202a9b9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7koee5ct2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14903 \u0432 Ivanti Xtraction: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/88797F90-DF94-496C-8AFD-C314E802A6C7", "creation_timestamp": "2026-07-22T05:10:33.496378Z"}, {"uuid": "69eb7acf-8b86-46d9-8044-ce632154985d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14903", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupvh3fjbs2b", "content": "\u30c7\u30fc\u30bf\u5206\u6790\u53ef\u8996\u5316\u88fd\u54c1\u300cIvanti Xtraction\u300d\u306b\u8907\u6570\u8106\u5f31\u6027\n\nIvanti\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670814\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u30c7\u30fc\u30bf\u5206\u6790\u53ef\u8996\u5316\u88fd\u54c1\u300cIvanti Xtraction\u300d\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u5404\u793e\u304c\u5b9a\u4f8b\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3059\u308b\u7c73\u6642\u9593\u6bce\u6708\u7b2c2\u706b\u66dc\u65e5\u3001\u3044\u308f\u3086\u308b\u300c\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc\u300d\u306b\u3042\u308f\u305b\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-14902\u300d\u300cCVE-2026-14903\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-14903\u300d\u306f\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u8106\u5f31\u6027\u3002\u60aa\u7528\u306b\u306f\u4f4e\u3044\u6a29\u9650\u304c\u5fc5\u8981\u3068\u306a\u308b\u304c\u3001\u30a6\u30a7\u30d6\u30eb\u30fc\u30c8\u5916\u306b\u5b58\u5728\u3059\u308b\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6...", "creation_timestamp": "2026-09-04T21:21:31.071324Z"}]}