VYPR
← All advisories
High severity8.8NVD Advisory· Published May 22, 2026· Updated Jul 23, 2026

CVE-2026-8992

CVE-2026-8992

Description

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.

Affected products

8
  • Ivanti/Secure Access Client for Linux7 versions
    cpe:2.3:a:ivanti:secure_access_client:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:ivanti:secure_access_client:*:*:*:*:*:*:*:*range: <=22.7
    • cpe:2.3:a:ivanti:secure_access_client:22.8:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:secure_access_client:22.8:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:secure_access_client:22.8:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:secure_access_client:22.8:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:secure_access_client:22.8:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:secure_access_client:22.8:r5:*:*:*:*:*:*
  • Ivanti/Secure Access Windows clientllm-fuzzy
    Range: <22.8R6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.