CVE-2026-92088
CVE-2026-92088 is a high-severity vulnerability with a CVSS 4.0 base score of 8.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-232.
Key facts
- Severity: High (CVSS 4.0 base score 8.6)
- EPSS exploit prediction: 0% (3rd percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-232
- Published:
- Last modified:
Description
Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1.
Frequently asked questions
- What is CVE-2026-92088?
- Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privilege Access: through 1.7.1.
- How severe is CVE-2026-92088?
- CVE-2026-92088 has a CVSS 4.0 base score of 8.6, rated high severity.
- Is CVE-2026-92088 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (3rd percentile), an estimate of the probability of exploitation in the next 30 days.
- How do I fix CVE-2026-92088?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2026-92088 published?
- CVE-2026-92088 was published on 2026-10-13.
References
Other CWE-232 vulnerabilities
- CVE-2025-20192 — High (CVSS 7.7): A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an…
- CVE-2025-40775 — High (CVSS 7.5): When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. If the TSIG…
- CVE-2023-39915 — High (CVSS 7.5): NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI…
- CVE-2023-39914 — High (CVSS 7.5): NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather…
- CVE-2023-2968 — High (CVSS 7.5): A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP…
- CVE-2025-20314 — Medium (CVSS 6.7): A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an…