PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-10745 upKeeper Solutions CVE debrief

A CVE record for Improper output neutralization for logs vulnerability in upKeeper Solutions upKeeper Instant Privilege Access on Windows was published on 2026-06-24T09:16:30.147Z and last modified on 2026-10-25T23:10:00.167Z. The vulnerability allows Log Injection-Tampering-Forging and has a CVSS score of 7.9. The affected product is upKeeper Instant Privilege Access through version 1.6.1.

Vendor
upKeeper Solutions
Product
upKeeper Instant Privilege Access
CVSS
HIGH 7.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-24
Original CVE updated
2026-10-25
Advisory published
2026-06-24
Advisory updated
2026-10-25

Who should care

Defenders and administrators responsible for upKeeper Instant Privilege Access installations should assess exposure and verify the vulnerability.

Why it matters

CVE-2026-10745 is a high-severity vulnerability in upKeeper Solutions upKeeper Instant Privilege Access on Windows, allowing for log injection-tampering-forging. Defenders should prioritize verifying the vulnerability and assessing exposure.

  • Verify upKeeper Instant Privilege Access version and assess exposure
  • Review logs for potential log injection-tampering-forging attempts
  • Implement additional logging and monitoring for upKeeper Instant Privilege Access

Technical summary

The CVE-2026-10745 vulnerability in upKeeper Solutions upKeeper Instant Privilege Access on Windows allows for log injection-tampering-forging due to improper output neutralization for logs. This issue affects upKeeper Instant Privilege Access through version 1.6.1. The vulnerability has a CVSS score of 7.9 and is considered high-severity. Defenders should prioritize verifying the vulnerability and assessing exposure.

Defensive priority

Defenders should prioritize verifying the vulnerability in upKeeper Instant Privilege Access and assessing exposure, as the CVE has a high CVSS score and allows for log injection.

Recommended defensive actions

  • Verify upKeeper Instant Privilege Access version and assess exposure
  • Review logs for potential log injection-tampering-forging attempts
  • Implement additional logging and monitoring for upKeeper Instant Privilege Access

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, but vendor comments or additional details are limited. The vulnerability allows Log Injection-Tampering-Forging due to improper output neutralization for logs in upKeeper Solutions upKeeper Instant Privilege Access on Windows. Defenders should verify the vulnerability and assess exposure. Evidence is limited to CVE and NVD details.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-10745 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-10745

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-10745 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-10745

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://support.upkeeper.se/hc/en-us/articles/28408945088796-CVE-2026-10745-Improper-output-neutralization-for-logs

    80f39f49-2521-4ee7-9e17-af5d55e8032f

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.