Impersonation Vulnerability in upKeeper Instant Privilege Access by upKeeper Solutions
CVE-2026-2450

7.4HIGH

Key Information:

Vendor

Upkeeper Solutions

Status
Upkeeper Instant Privilege Access
Vendor
CVE Published:
14 April 2026

What is CVE-2026-2450?

An impersonation vulnerability in upKeeper Solutions' upKeeper Instant Privilege Access allows attackers to hijack a privileged thread of execution due to a misconfiguration in the .NET framework. This issue affects all versions of the product up to and including 1.5.0, posing a significant risk to user data and application integrity. Proper remediation steps should be taken to secure the affected product.

Affected Version(s)

upKeeper Instant Privilege Access 0 <= 1.5.0

References

https://support.upkeeper.se/hc/en-us/articles/26783542353...

CVSS V4

Score:
7.4
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tony Nilsson
.