This vulnerability in Ivanti Secure Access Client arises from improper validation of certificates, which can be exploited remotely without authentication to execute arbitrary code on the affected system. The issue affects versions before 22.8R6. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation could lead to arbitrary code execution by a remote attacker without authentication, potentially compromising confidentiality, integrity, and availability of the affected system. This represents a significant security risk for users of Ivanti Secure Access Client versions prior to 22.8R6.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting exposure of the affected client and monitor for updates from Ivanti. Do not assume the vulnerability is mitigated without vendor confirmation.