May 2026 Security Advisory Ivanti Secure Access Client (CVE-2026-7431, CVE-2026-7432)

Update 22 May: CVE-2026-8992 has been added to Vulnerability Details Summary Ivanti has released updates for the Ivanti Secure Access Client which addresses one medium severity vulnerability and two High severity vulnerabilities. We are not aware of any customers being exploited by these...

Citrix_Secure_Access_LPE_0DAY

Citric Secure Access Local privilege escalation I have discovered a local privilege escalation vulnerability in the Citrix Secure Access Windows Client. This vulnerability allows a privileged administrator to inject a malicious payload to gain NT Authority privileges. The affected versions of...

Multiple vulnerabilities have been addressed in Citrix Secure Access Client, NetScaler ADC, NetScaler Gateway, and NetScaler Console.

Citrix has addressed multiple vulnerabilities in Citrix Secure Access Client, NetScaler ADC, NetScaler Gateway, and NetScaler Console. These vulnerabilities have been assigned CVSS v4.0 scores ranging from 6.9 to 9.5. They include memory corruption, improper authentication, and improper privilege...

Citrix Secure Access Client for Windows Security Bulletin for CVE-2026-118268

Severity - High Description of Problem A vulnerability has been discovered in the Citrix Secure Access Client for Windows. Refer to the information below for further details: Affected Versions The following supported versions of Citrix Secure Access Client for Windows are affected by the...

ivanti-cve-2023-35080-privilege-escalation-bof

Ivanti Connect Secure VPN Privilege Escalation Ivanti Secure Access previously Pulse Secure privilege escalation Cobalt Strike BOF CVE-2023-35080. Exploit by Alex and BOF by Tijme. Made possible by Northwave Cyber Security Description This is a Cobalt Strike CS Beacon Object File BOF and executab...

CVE-2026-116767

CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service...

CVE-2026-116768

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time...

CVE-2026-116766

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

EUVD-2026-115626

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time...

CVE-2026-116768 Missing length validation in Absolute Secure Access

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time...

CVE-2026-116768 Missing length validation in Absolute Secure Access

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time...

CVE-2026-116768

The Absolute Secure Access software is affected by a missing length validation vulnerability in versions prior to 14.61 . An authenticated attacker can exploit this flaw to cause a persistent denial of service when connecting for the first time. No specific exploit links or scanner source codes a...

CVE-2026-116767

Secure Access servers running versions prior to 14.61 are vulnerable to an improper input handling vulnerability. This flaw allows authenticated attackers to trigger a persistent denial of service (DoS). No specific remediation or exploit details are provided in the documents.

EUVD-2026-115623

CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service...

CVE-2026-116767 Improper input handling in Secure Access servers

CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service...

CVE-2026-97718

CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control...

CVE-2026-116769

CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14.61. Attackers can modify security settings of a client via the server...

EUVD-2026-115614

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

CVE-2026-116766

CVE-2026-116766 describes an improper input handling vulnerability in the Secure Access server affecting versions 13.0 through prior to 14.61 . An attacker can exploit this flaw to cause a persistent denial of service (DoS) of the server. No specific exploit information or remediation details are...

CVE-2026-116766 Improper input handling in Secure Access server

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...