SecuriTricks - CVE-2026-7431

Description

An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a shared memory section.

Product(s) Impacted

Vendor	Product	Versions
Ivanti	Secure Access Client	*, 22.8
Microsoft	Windows	-

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-732

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	ivanti	secure_access_client	/	/	/	/	/	/	/	/
a	ivanti	secure_access_client	22.8	-	/	/	/	/	/	/
a	ivanti	secure_access_client	22.8	r1	/	/	/	/	/	/
a	ivanti	secure_access_client	22.8	r2	/	/	/	/	/	/
a	ivanti	secure_access_client	22.8	r3	/	/	/	/	/	/
a	ivanti	secure_access_client	22.8	r4	/	/	/	/	/	/
a	ivanti	secure_access_client	22.8	r5	/	/	/	/	/	/
o	microsoft	windows	-	/	/	/	/	/	/	/

References

https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Secure-Access-Client-CVE-2026-7431-CVE-2026-7432?language=en_US

CVSS Score

4.4 / 10

CVSS Data - 3.1

Attack Vector: LOCAL
Attack Complexity: LOW
Privileges Required: LOW
Scope: UNCHANGED
Confidentiality Impact: LOW
Integrity Impact: LOW
Availability Impact: NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

View Vector String

Timeline

Published: May 12, 2026, 3:16 p.m.
Last Modified: May 12, 2026, 7:53 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

3c1d8aa1-5a33-4ea4-8992-aadd6440af75

CVE-2026-7431