CVE-2026-8992

Published: May 22, 2026Modified: Jul 23, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75 (Secondary)

Description

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.

Affected (7)

Products: Ivanti: Secure Access Client

Ivanti

1 product

Secure Access Client

Configuration A

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ivanti Secure Access Client	Up to 22.7
Ivanti Secure Access Client	Version 22.8
Ivanti Secure Access Client	Version 22.8 r1
Ivanti Secure Access Client	Version 22.8 r2
Ivanti Secure Access Client	Version 22.8 r3
Ivanti Secure Access Client	Version 22.8 r4
Ivanti Secure Access Client	Version 22.8 r5

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (1)

https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Secure-Access-Client-CVE-2026-7431-CVE-2026-7432?language=en_US

Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Vendor Advisory

Timeline

No history available yet.