CVE-2026-45208
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. The attacker must first obtain the ability to execute low-privileged code.
Risk Assessment
A local attacker could gain elevated privileges, leading to full system compromise.
Recommendation
Apply the latest security patches from the vendor for the Apex One/SEP agent.
Other vulnerabilities in Apex One/SEP agent
See all- CVE-2026-45207High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. Similar to CVE-2026-45206 but in a different process protection communication mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-45206High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. Similar to CVE-2026-45207 but in a different process protection communication mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-34930High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. Similar to CVE-2026-34927 but in a different process protection mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-34929High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. This is similar to CVE-2026-34927 but exists in a different inter-process communication mechanism. The attacker must first obtain the ability to execute low-privileged code.
- CVE-2026-34928High
An origin validation vulnerability in the Apex One/SEP agent allows a local attacker to escalate privileges via a named pipe communication mechanism. The attacker must first obtain low-privileged code execution.
- CVE-2026-34927High
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges. The attacker must first obtain the ability to execute low-privileged code.
Original NVD description (English source)
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.