CVE-2026-7432
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A race condition in Ivanti Secure Access Client before version 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM.
Risk Assessment
Privilege escalation to SYSTEM level can lead to complete control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Ivanti Secure Access Client to version 22.8R6 or later to mitigate this vulnerability.
Other vulnerabilities in Ivanti Secure Access Client
See all- CVE-2026-8992High
An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.
- CVE-2026-7431Medium
An incorrect permission assignment for a critical resource in Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a shared memory section.
Original NVD description (English source)
A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM
Vulnerability data from NVD (NIST) · CISA KEV · EPSS