CVE-2026-2450
HighSummary
A .NET misconfiguration vulnerability in upKeeper Instant Privilege Access allows hijacking a privileged thread of execution. This affects versions through 1.5.0.
Risk Assessment
An attacker could hijack a privileged thread, potentially leading to privilege escalation and system compromise.
Recommendation
Update to a version later than 1.5.0 and review impersonation configuration.
Other vulnerabilities in upKeeper Instant Privilege Access
See all- CVE-2026-2449Critical
An argument injection vulnerability in upKeeper Instant Privilege Access allows hijacking a privileged thread of execution. The issue affects versions through 1.5.0.
- CVE-2026-10745High
CVE-2026-10745 describes an improper output neutralization for logs vulnerability in upKeeper Solutions upKeeper Instant Privilege Access on Windows, allowing log injection, tampering, and forging.
Original NVD description (English source)
.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant Privilege Access: through 1.5.0.