Improper Handling of Undefined Values in upKeeper Instant Privilege Access by upKeeper Solutions
CVE-2026-92088

8.6HIGH

Key Information:

Vendor
CVE Published:
13 October 2026

What is CVE-2026-92088?

An improper handling of undefined values vulnerability exists in upKeeper Solutions' upKeeper Instant Privilege Access software. This flaw can be exploited to achieve unauthorized privilege escalation. Specifically, the issue affects versions of the product prior to 1.7.1, potentially allowing attackers to elevate their access rights improperly and execute restricted commands. Users are advised to review their system configurations and apply the necessary updates to mitigate this risk.

Affected Version(s)

upKeeper Instant Privilege Access 0 <= 1.7.1

References

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.