VULNERABILITY INTELLIGENCE

CVE-2026-8992

CVSS score8.8 HIGH
EPSS probability0.56%
CISA KEVNot currently listed
Published2026-05-22
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.

Weakness classification

  • CWE-295: Improper Certificate Validation

Primary references