High · 7.8 CVE-2026-7432 EUVD-2026-29486GHSA-3p86-c4c4-99r5

A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM

Published May 12, 2026 · Updated May 13, 2026 · Assigned by ivanti

Vendor: ivanti Product: Secure Access Client Category: Network devices

Description

A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM

Affected products

Vendor	Product	Affected	Fixed
ivanti	Secure Access Client	—	22.8R6

Advisories 1

WID-SEC-2026-1502 Ivanti Secure Access Client: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 25, 2026

References

https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Secure-Access-Client-CVE-2026-7431-CVE-2026-7432?language=en_US