CVE-2026-7431

Published: May 12, 2026Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 1.8 / Impact: 2.5

Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 (Secondary)

Description

An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a shared memory section.

Affected (7)

Products: Ivanti: Secure Access Client

Ivanti

1 product

Secure Access Client

Configuration A

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ivanti Secure Access Client	Up to 22.7
Ivanti Secure Access Client	Version 22.8
Ivanti Secure Access Client	Version 22.8 r1
Ivanti Secure Access Client	Version 22.8 r2
Ivanti Secure Access Client	Version 22.8 r3
Ivanti Secure Access Client	Version 22.8 r4
Ivanti Secure Access Client	Version 22.8 r5

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (1)

https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Secure-Access-Client-CVE-2026-7431-CVE-2026-7432?language=en_US

Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Vendor Advisory

Timeline

No history available yet.