Privilege Escalation in Secure Access Windows Client and Server

Executive Summary

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for Windows client and server systems before version 14.55. Attackers with local access can exploit it to elevate privileges to Administrator when Secure Access is installed in a non-default location.

Useful 0 Not Useful 0

Detection Guidance

Check if Secure Access is installed in a non-default directory by inspecting the installation path. Look for unusual privilege escalation attempts in system logs or audit trails.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow unauthorized users to gain full control over affected systems, potentially leading to data theft, system manipulation, or further network compromise.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability may violate compliance requirements that mandate strict access controls and protection of sensitive data, as unauthorized privilege escalation could lead to data breaches or unauthorized access.

Useful 0 Not Useful 0

Mitigation Strategies

Update Secure Access to version 14.55 or later immediately. Ensure Secure Access is installed only in default directories to prevent privilege escalation.

Useful 0 Not Useful 0