CVE-2023-35080: Ivanti Secure Access Client

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to various security risks, including the escalation of privileges, denial of service, or information disclosure.

Affected products

• Ivanti Secure Access Client: before 22.6 (fixed in 22.6); version 22.6 only

Published 2023-11-15. Last modified 2026-06-17.