CVE-2026-8992HIGH 8.8EPSS p43.7%

CVE-2026-8992CVE-2026-8992

ivanti / secure_access_client

Description

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS0.56% probability of exploitation · percentile 43.7% · 2026-08-03T12:00:16Z
Published2026-05-22
Last modified2026-07-23

Underlying weaknesses· 1

CWE-295

References

  1. https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Secure-Access-Client-CVE-2026-7431-CVE-2026-7432?language=en_US

1

TypeTargetConfidenceTier
WeaknessImproper Certificate Validationcwe-2950%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-5788
CVE
CVE-2025-9872
CVE
CVE-2026-5787
CVE
CVE-2025-9712
CVE
CVE-2025-22467
CVE
CVE-2026-5786
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.