Severity: 8.6 High (7.0-8.9)
CVE ID: CVE-2026-92088
Details
This advisory addresses a vulnerability where clients with undefined configuration can gain unrestricted administrator rights when elevated.
Problem type: CWE-232
Impact: CAPEC-233
Applicability
This advisory is applicable only when
| Product Name | Impacted Version(s) | Fixed Version(s) | Released On |
|---|---|---|---|
| upKeeper Instant Privilege Access | before 1.7.1.x | 1.8.0.6417 | 2026-09-23 |
Impact
This vulnerability allows users with undefined configuration to elevate and do anything a local administrator can do.
Fix
This issue has been fixed by updating upKeeper Instant Privilege to 1.8.0.6417 version or later.
Acknowledgements
This vulnerability was reported by Cazandra Waern, Ljungby Kommun.
Please contact our security team (secure@upkeeper.se) for security related questions and product support (help@upkeeper.se) for questions about our products or services.
Comments
0 comments
Please sign in to leave a comment.