CVE-2026-40952

Privilge misconfiguration in Secure Access installers

High · published July 15, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

CVE-2026-40952 is a privilege misconfiguration

in the Secure Access installer for the Windows client and server prior to

version 14.55. Attackers with local access to the client or server can use it

to elevate privileges to Administrator when Secure Access is installed in a

non-default location.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N
EPSS
0.00137 · 2.8th percentile
Published
2026-07-15T19:32Z
EPSS history
Timeline
  • 15 JUL 19:32Z
    Privilge misconfiguration in Secure Access installers
    cvelistv5