CVE-2026-34928
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
An origin validation vulnerability in the Apex One/SEP agent allows a local attacker to escalate privileges via a named pipe communication mechanism. The attacker must first obtain low-privileged code execution.
Risk Assessment
A local attacker could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply available patches from the vendor for Apex One/SEP agents.
Other vulnerabilities in Apex One/SEP agent
See all- CVE-2026-45208High
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-45207High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. Similar to CVE-2026-45206 but in a different process protection communication mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-45206High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. Similar to CVE-2026-45207 but in a different process protection communication mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-34930High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. Similar to CVE-2026-34927 but in a different process protection mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-34929High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-34927High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. The attacker must first obtain the ability to execute low-privileged code.
Original NVD description (English source)
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.