CVE-2026-8992

HighCVSS 8.8

Published: 22/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

43th percentile - higher than 43% of all known CVEs

Summary

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.

Risk Assessment

The risk includes remote code execution on the client, which could lead to system compromise and data theft.

Recommendation

Immediately upgrade Ivanti Secure Access Client to version 22.8R6 or later.

Other vulnerabilities in Ivanti Secure Access Client

CVE-2026-7432High
A race condition in Ivanti Secure Access Client before version 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM.

Original NVD description (English source)

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.