CVE-2026-92088CWE-232

CVE-2026-92088

published October 13, 2026

CVSS
8.6
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.

This issue affects upKeeper Instant Privilege Access: through 1.7.1.

The record
Technical detail
CVSS
8.6 · NONE
CVSS v4.0
8.6 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00140 · 3.0th percentile
Weakness
CWE-232 · Improper Handling of Undefined Values
Published
2026-10-13T23:21Z
References (1)
https://support.upkeeper.se/hc/en-us/articles/31019905229084-CVE-2026-92088-Improper-handling-of-undefined-values · 80f39f49-2521-4ee7-9e17-af5d55e8032f
EPSS history
Timeline
  • 15 OCT 03:35Z
    EPSS moved — → 0%
    epss
  • 13 OCT 18:47Z
    Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation
    cvelistv5
  • 13 OCT 18:47Z
    Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation
    cvelistv5