CVE-2026-8992 — ivanti / Secure Access Client

CVE-2026-8992

ivanti / Secure Access Client PUBLISHED

Description (CNA)

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
ivanti / Secure Access Client	unaffected 22.8R6

CWE

CWE-295

References

https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Secure-Access-Client-CVE-2026-7431-CVE-2026-7432?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.